Description
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.
References
- http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt
- 4067 vdb-entry
- 10978 third-party-advisory
- atmail-util-xss(15324) vdb-entry
- 1009208 vdb-entry
- 4066 vdb-entry
- 9748 vdb-entry