Description
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.
References
- 1016454 vdb-entry
- 20060710 Re: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- mimesweeper-error-xss(27642) vdb-entry
- 20060710 MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20998 third-party-advisory
- http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm
- 20060711 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- ADV-2006-2731 vdb-entry
- 18916 vdb-entry
- 20060710 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list
- 20060710 RE: MIMESweeper For Web 5.X Cross Site Scripting mailing-list