Description
Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.
References
- 20050903 I have discovered small xss error in open webmail 2.41 mailing-list
- 14771 vdb-entry
- 16734 third-party-advisory