Unscored CVE-2006-2484 EUVD-2006-2484GHSA-xhp8-fw7x-gxph

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web…

Published May 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.

References

20060516 IceWarp Cross-Site Scripting(XSS) mailing-list
17995 vdb-entry
925 third-party-advisory
icewarpwebmail-phpsessid-xss(26680) vdb-entry