CVE-2006-3522 Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mimesweeper for web | <= 5.1.14 | No fix listed |
References
- download.mimesweeper.com patch
- 20060710 MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20060710 Re: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20060710 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20998 patch third-party-advisory vendor-advisory
- 1016454 vdb-entry
- 20060710 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20060711 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 18916 vdb-entry
- ADV-2006-2731 vdb-entry
- mimesweeper-error-xss(27642) vdb-entry