Description
Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields.
References
- 12388 vdb-entry
- 1013017 vdb-entry
- 20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities mailing-list
- 14053 third-party-advisory
- magic-winmail-userphp-xss(19113) vdb-entry