medium4.3
CVE-2005-0445
Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logi…
Impact
Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Webmail | Open Webmail | Versions 2.00, 2.01, 2.10, 2.20, 2.21, 2.30 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14253
- http://securitytracker.com/id?1013172
- http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
- http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch
- http://www.securityfocus.com/bid/12547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19335
- http://secunia.com/advisories/14253
- http://securitytracker.com/id?1013172
- http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
- http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch
- http://www.securityfocus.com/bid/12547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19335