CVE-2010-3201 Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
MediumCVSS 4.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | <= 4.2d4-4 | No fix listed |
| netwin surgemail | = 1.0c | No fix listed |
| netwin surgemail | = 1.0d | No fix listed |
| netwin surgemail | = 1.1a | No fix listed |
| netwin surgemail | = 1.1b | No fix listed |
| netwin surgemail | = 1.1c | No fix listed |
| netwin surgemail | = 1.1d | No fix listed |
| netwin surgemail | = 1.2a | No fix listed |
| netwin surgemail | = 1.2b | No fix listed |
| netwin surgemail | = 1.2c | No fix listed |
| netwin surgemail | = 1.3a | No fix listed |
| netwin surgemail | = 1.3a_rc1 | No fix listed |
| netwin surgemail | = 1.3b | No fix listed |
| netwin surgemail | = 1.3c | No fix listed |
| netwin surgemail | = 1.3d | No fix listed |
| netwin surgemail | = 1.3e | No fix listed |
| netwin surgemail | = 1.3f | No fix listed |
| netwin surgemail | = 1.3g | No fix listed |
| netwin surgemail | = 1.3h | No fix listed |
| netwin surgemail | = 1.3i | No fix listed |
| netwin surgemail | = 1.3j | No fix listed |
| netwin surgemail | = 1.3k | No fix listed |
| netwin surgemail | = 1.3l | No fix listed |
| netwin surgemail | = 1.4a | No fix listed |
| netwin surgemail | = 1.4b | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | = 1.4c | No fix listed |
| netwin surgemail | = 1.5a | No fix listed |
| netwin surgemail | = 1.5b | No fix listed |
| netwin surgemail | = 1.5c | No fix listed |
| netwin surgemail | = 1.5d | No fix listed |
| netwin surgemail | = 1.5d2 | No fix listed |
| netwin surgemail | = 1.5f | No fix listed |
| netwin surgemail | = 1.6a | No fix listed |
| netwin surgemail | = 1.6b | No fix listed |
| netwin surgemail | = 1.6d | No fix listed |
| netwin surgemail | = 1.6e | No fix listed |
| netwin surgemail | = 1.6e2 | No fix listed |
| netwin surgemail | = 1.7a | No fix listed |
| netwin surgemail | = 1.7b3 | No fix listed |
| netwin surgemail | = 1.8a | No fix listed |
| netwin surgemail | = 1.8b3 | No fix listed |
| netwin surgemail | = 1.8d | No fix listed |
| netwin surgemail | = 1.8e | No fix listed |
| netwin surgemail | = 1.8f | No fix listed |
| netwin surgemail | = 1.8g3 | No fix listed |
| netwin surgemail | = 1.9 | No fix listed |
| netwin surgemail | = 1.9b2 | No fix listed |
| netwin surgemail | = 2.0a2 | No fix listed |
| netwin surgemail | = 2.0c | No fix listed |
| netwin surgemail | = 2.0e | No fix listed |
| netwin surgemail | = 2.0g2 | No fix listed |
| netwin surgemail | = 2.1a | No fix listed |
| netwin surgemail | = 2.1c7 | No fix listed |
| netwin surgemail | = 2.2a6 | No fix listed |
| netwin surgemail | = 2.2c9 | No fix listed |
| netwin surgemail | = 2.2c10 | No fix listed |
| netwin surgemail | = 2.2g2 | No fix listed |
| netwin surgemail | = 2.2g3 | No fix listed |
| netwin surgemail | = 3.0a | No fix listed |
| netwin surgemail | = 3.0c2 | No fix listed |
| netwin surgemail | = 3.1s | No fix listed |
| netwin surgemail | = 3.2e | No fix listed |
| netwin surgemail | = 3.5a | No fix listed |
| netwin surgemail | = 3.5b3 | No fix listed |
| netwin surgemail | = 3.6d | No fix listed |
| netwin surgemail | = 3.6f3 | No fix listed |
| netwin surgemail | = 3.6f5 | No fix listed |
| netwin surgemail | = 3.6f7 | No fix listed |
| netwin surgemail | = 3.7b | No fix listed |
| netwin surgemail | = 3.7b3 | No fix listed |
| netwin surgemail | = 3.7b5 | No fix listed |
| netwin surgemail | = 3.7b6 | No fix listed |
| netwin surgemail | = 3.7b7 | No fix listed |
| netwin surgemail | = 3.7b8 | No fix listed |
| netwin surgemail | = 3.8a | No fix listed |
| netwin surgemail | = 3.8b | No fix listed |
| netwin surgemail | = 3.8d | No fix listed |
| netwin surgemail | = 3.8f | No fix listed |
| netwin surgemail | = 3.8f2 | No fix listed |
| netwin surgemail | = 3.8f3 | No fix listed |
| netwin surgemail | = 3.8i | No fix listed |
| netwin surgemail | = 3.8i2 | No fix listed |
| netwin surgemail | = 3.8i3 | No fix listed |
| netwin surgemail | = 3.8k | No fix listed |
| netwin surgemail | = 3.8k2 | No fix listed |
| netwin surgemail | = 3.8k3 | No fix listed |
| netwin surgemail | = 3.8k4 | No fix listed |
| netwin surgemail | = 3.8m | No fix listed |
| netwin surgemail | = 3.8o | No fix listed |
| netwin surgemail | = 3.8q | No fix listed |
| netwin surgemail | = 3.8s | No fix listed |
| netwin surgemail | = 3.8u | No fix listed |
| netwin surgemail | = 3.9a | No fix listed |
| netwin surgemail | = 3.9c | No fix listed |
| netwin surgemail | = 3.9e | No fix listed |
| netwin surgemail | = 3.9g | No fix listed |
| netwin surgemail | = 3.9g2 | No fix listed |
| netwin surgemail | = 4.0a | No fix listed |
| netwin surgemail | = 4.0k | No fix listed |
| netwin surgemail | = 4.0u3 | No fix listed |
| netwin surgemail | = 4.0u4 | No fix listed |
| netwin surgemail | = 4.0v-8 | No fix listed |
| netwin surgemail | = 4.2a2-2 | No fix listed |
| netwin surgemail | = 4.2a2-3 | No fix listed |
| netwin surgemail | = 4.2a3-3 | No fix listed |
| netwin surgemail | = 4.2d-1 | No fix listed |
| netwin surgemail | = 4.2d2-2 | No fix listed |
| netwin surgemail | = 4.2d3-3 | No fix listed |
| netwin surgemail | = beta_3.9a | No fix listed |
References
- ictsec.se exploit
- 41685 third-party-advisory vendor-advisory
- 20101004 NetWin Surgemail XSS vulnerability mailing-list
- 43679 exploit vdb-entry
- 34797 exploit