CVE-2007-0953 Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atmail webmail | = 4.3 | No fix listed |
| atmail webmail | = 4.6 | No fix listed |
| atmail webmail | = 4.11 | No fix listed |
| atmail webmail | = 4.51 | No fix listed |
| atmail webmail | = 4.61 | No fix listed |
References
- kb.atmail.com
- lostmon.blogspot.com
- 33193 vdb-entry
- 24155 third-party-advisory vendor-advisory
- 22552 vdb-entry
- ADV-2007-0603 vdb-entry
- @mail-search-xss(32483) vdb-entry