Vulnerabilities > CVE-2006-0758 - Unspecified vulnerability in Hivemail

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
hivemail
exploit available
NVD
Published: 2006-02-18
Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts, which is not properly cleansed when accessed from the $_SERVER['PHP_SELF'] variable.

Vulnerable Configurations

Part Description Count
Application
Hivemail
10

Exploit-Db

descriptionHiveMail 1.2.2/1.3 index.php $_SERVER['PHP_SELF'] XSS. CVE-2006-0758 . Webapps exploit for php platform
idEDB-ID:27186
last seen2016-02-03
modified2006-02-11
published2006-02-11
reporterGulfTech Security
sourcehttps://www.exploit-db.com/download/27186/
titleHiveMail 1.2.2/1.3 index.php - $_SERVER'PHP_SELF' XSS

References