NVD

Id
60895  
Name
CVE-2006-2190  
Description
Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in (1) openwebmail-send.pl, (2) openwebmail-advsearch.pl, (3) openwebmail-folder.pl, (4) openwebmail-prefs.pl, (5) openwebmail-abook.pl, (6) openwebmail-read.pl, (7) openwebmail-cal.pl, and (8) openwebmail-webdisk.pl. NOTE: the openwebmail-main.pl vector is already covered by CVE-2005-2863.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-04  
Modified Date
2008-11-03  
Seq
2006-2190  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
314424 60895 CVE-2006-2190 [owm-announce] 20060502 OpenWebMail version 2.52  View
314425 60895 CVE-2006-2190 http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/shares/ow-shared.pl?rev1=232;rev2=233  View
314426 60895 CVE-2006-2190 http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/log/trunk/?rev=233&limit=33  View
314427 60895 CVE-2006-2190 http://pridels0.blogspot.com/2006/04/open-webmail-251-xss-vuln.html  View
314428 60895 CVE-2006-2190 openwebmail-multiple-scripts-xss(26105)  View

Related JVN