CVE

Id
16640  
CVE No.
CVE-2006-0536  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter. NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort".  
Phase
Assigned (20060203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134381 16640 CVE-2006-0536 BUGTRAQ:20060203 Neomail Cross Site Scripting Vulnerability  View
134382 16640 CVE-2006-0536 URL:http://www.securityfocus.com/archive/1/archive/1/423901/100/0/threaded  View
134383 16640 CVE-2006-0536 VUPEN:ADV-2006-0449  View
134384 16640 CVE-2006-0536 URL:http://www.vupen.com/english/advisories/2006/0449  View
134385 16640 CVE-2006-0536 OSVDB:22978  View
134386 16640 CVE-2006-0536 URL:http://www.osvdb.org/22978  View
134387 16640 CVE-2006-0536 SECTRACK:1015581  View
134388 16640 CVE-2006-0536 URL:http://securitytracker.com/id?1015581  View
134389 16640 CVE-2006-0536 XF:neomail-neomail-script-xss(24470)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61595 JVNDB-2006-003861 CipherTrust IronMail におけるサービス運用妨害 (DoS) の脆弱性 CipherTrust IronMail には、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2006-0538 16640 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003861.html  View