CVE-2006-6364 Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.
MediumCVSS 6.8
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inside systems | = mail_2.0 | No fix listed |
References
- 23229 patch third-party-advisory vendor-advisory
- 1990 third-party-advisory
- www.insidesystems.net patch
- 20061202 [ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail mailing-list
- 21424 vdb-entry vendor-advisory
- ADV-2006-4848 vdb-entry
- ismail-error-xss(30704) vdb-entry