CVE-2007-2061

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• MailBee WebMail Pro 3.4 - 'Check_login.asp' Cross-Site Scripting2007-04-13 · webapps · php · Verified

Impact

Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Affected products

References

• NVD record
• CVE.org record
• http://osvdb.org/34974
• http://secunia.com/advisories/24882
• http://securityreason.com/securityalert/2572
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls44
• http://www.securityfocus.com/archive/1/465611/100/0/threaded
• http://www.securityfocus.com/bid/23481
• http://www.vupen.com/english/advisories/2007/1416
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33645
• http://osvdb.org/34974
• http://secunia.com/advisories/24882
• http://securityreason.com/securityalert/2572
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls44
• http://www.securityfocus.com/archive/1/465611/100/0/threaded
• http://www.securityfocus.com/bid/23481
• http://www.vupen.com/english/advisories/2007/1416
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33645