Vulnerabilities > CVE-2006-3522 - Cross-Site Scripting vulnerability in MIMESweeper For Web Access Denied

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
clearswift
NVD
Published: 2006-07-12
Updated: 2018-10-18

Summary

Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.

Vulnerable Configurations

Part Description Count
Application
Clearswift
1

References