Vulnerabilities > CVE-2006-2484 - Unspecified vulnerability in Icewarp web Mail

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

icewarp

NVD

Published: 2006-05-19

Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.

Vulnerable Configurations

Part	Description	Count
Application	Icewarp Icewarp WEB Mail 4.1.5 Icewarp WEB Mail 3.5.0 Icewarp WEB Mail 3.4.1 Icewarp WEB Mail 3.3.1 Icewarp WEB Mail 5.2.7 Icewarp WEB Mail 5.2.8 Icewarp WEB Mail 3.4.2 Icewarp WEB Mail 1.40.00 Icewarp WEB Mail 1.40.10 Icewarp WEB Mail 3.5.1 Icewarp WEB Mail 3.1.4 Icewarp WEB Mail 5.3.1 Icewarp WEB Mail 5.4 Icewarp WEB Mail 5.5.1 Icewarp WEB Mail 4.1.4 Icewarp WEB Mail 5.3.2 Icewarp WEB Mail 3.3.2 Icewarp WEB Mail 5.3	18

References

http://securityreason.com/securityalert/925
http://securityreason.com/securityalert/925
http://www.securityfocus.com/archive/1/434121/100/0/threaded
http://www.securityfocus.com/archive/1/434121/100/0/threaded
http://www.securityfocus.com/bid/17995
http://www.securityfocus.com/bid/17995
https://exchange.xforce.ibmcloud.com/vulnerabilities/26680
https://exchange.xforce.ibmcloud.com/vulnerabilities/26680