CVE

Id
28647  
CVE No.
CVE-2007-5290  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298506 28647 CVE-2007-5290 BUGTRAQ:20071005 Reporting Vulnerable Public Web mail  View
298507 28647 CVE-2007-5290 URL:http://marc.info/?l=bugtraq&m=119161078031690&w=2  View
298508 28647 CVE-2007-5290 BID:25942  View
298509 28647 CVE-2007-5290 URL:http://www.securityfocus.com/bid/25942  View
298510 28647 CVE-2007-5290 VUPEN:ADV-2007-3450  View
298511 28647 CVE-2007-5290 URL:http://www.vupen.com/english/advisories/2007/3450  View
298512 28647 CVE-2007-5290 OSVDB:37649  View
298513 28647 CVE-2007-5290 URL:http://osvdb.org/37649  View
298514 28647 CVE-2007-5290 OSVDB:37650  View
298515 28647 CVE-2007-5290 URL:http://osvdb.org/37650  View
298516 28647 CVE-2007-5290 SECTRACK:1018783  View
298517 28647 CVE-2007-5290 URL:http://www.securitytracker.com/id?1018783  View
298518 28647 CVE-2007-5290 SECUNIA:27073  View
298519 28647 CVE-2007-5290 URL:http://secunia.com/advisories/27073  View
298520 28647 CVE-2007-5290 XF:mailbee-login-default-xss(36979)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57497 JVNDB-2007-006189 Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性 Directory Image Gallery の photos.cfm には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5292 28647 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006189.html  View