CVE-2007-2718 Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web scr...
MediumCVSS 4.3
EPSS 16.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | All versions | No fix listed |
| stalker communigate pro | <= 5.1.8 | No fix listed |
References
- 20070512 CommuniGate Pro web mail persistent cross-site scripting vulnerability mailing-list
- 36017 vdb-entry
- 25250 patch third-party-advisory vendor-advisory
- www.communigate.com
- www.scanit.be vendor-advisory
- 23950 patch vdb-entry
- 1018048 patch vdb-entry
- ADV-2007-1795 vdb-entry
- communigate-mail-xss(34266) vdb-entry