Description
Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachments.
References
- 16665 third-party-advisory
- 20926 vdb-entry
- http://secunia.com/secunia_research/2005-58/advisory/
- 15493 vdb-entry
- 20051118 Secunia Research: Winmail Server Multiple Vulnerabilities mailing-list
- ADV-2005-2485 vdb-entry
- 20927 vdb-entry
- 20928 vdb-entry