medium4.3
CVE-2010-3459
Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web scrip…
Impact
Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gecad | Axigen Mail Server | through 7.4.1 All versions Versions 1.0.1, 1.0.2, 1.0.5, 1.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/41430
- http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html
- http://www.osvdb.org/68026
- http://www.securityfocus.com/bid/43230
- http://www.vupen.com/english/advisories/2010/2415
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61825
- http://secunia.com/advisories/41430
- http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html
- http://www.osvdb.org/68026
- http://www.securityfocus.com/bid/43230
- http://www.vupen.com/english/advisories/2010/2415
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61825