CVE

Id
28403  
CVE No.
CVE-2007-5046  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295160 28403 CVE-2007-5046 MISC:http://www.mwrinfosecurity.com/publications/mwri_merak-webmail-xss-advisory_2008-09-17.pdf  View
295161 28403 CVE-2007-5046 BID:25708  View
295162 28403 CVE-2007-5046 URL:http://www.securityfocus.com/bid/25708  View
295163 28403 CVE-2007-5046 VUPEN:ADV-2007-3225  View
295164 28403 CVE-2007-5046 URL:http://www.vupen.com/english/advisories/2007/3225  View
295165 28403 CVE-2007-5046 OSVDB:37428  View
295166 28403 CVE-2007-5046 URL:http://osvdb.org/37428  View
295167 28403 CVE-2007-5046 SECUNIA:26877  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52034 JVNDB-2007-000697 Lhaplus におけるバッファオーバーフローの脆弱性 Lhaplus は、複数の圧縮ファイル形式に対応した圧縮・展開を行うソフトウェアです。Lhaplus には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-5048 28403 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000697.html  View