Vulnerabilities > CVE-2007-1991 - Cross-Site Scripting vulnerability in Youngzsoft CMailServer Comment Parameter
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
youngzsoft
Summary
Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |