Description
Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body.
References
- 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail mailing-list
- 20488 vdb-entry
- mailsiteexpress-attachment-script-execution(22907) vdb-entry
- 1015117 vdb-entry
- http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf
- 17240 third-party-advisory
- oval:org.mitre.oval:def:1052 vdb-entry signature
- 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail mailing-list