Description
Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.
References
- 14253 third-party-advisory
- 12547 vdb-entry
- http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch
- open-webmail-logindomain-xss(19335) vdb-entry
- http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
- 1013172 vdb-entry