Description
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
References
- 20708 vdb-entry
- 1017113 vdb-entry
- 102497 vendor-advisory
- 22575 third-party-advisory
- ADV-2006-4183 vdb-entry
- java-webmail-xss(29806) vdb-entry