NVD

Id
59488  
Name
CVE-2006-0758  
Description
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts, which is not properly cleansed when accessed from the $_SERVER["PHP_SELF"] variable.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-17  
Modified Date
2011-03-07  
Seq
2006-0758  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305982 59488 CVE-2006-0758 20060210 HiveMail <= 1.3 Multiple Vulnerabilities  View
305983 59488 CVE-2006-0758 http://forum.hivemail.com/showthread.php?p=26745  View
305984 59488 CVE-2006-0758 http://www.gulftech.org/?node=research&article_id=00098-02102006  View
305985 59488 CVE-2006-0758 16591  View
305986 59488 CVE-2006-0758 ADV-2006-0527  View
305987 59488 CVE-2006-0758 hivemail-index-xss(24622)  View

Related JVN