Description
Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
References
- @mail-search-xss(32483) vdb-entry
- 22552 vdb-entry
- http://kb.atmail.com/?p=410
- ADV-2007-0603 vdb-entry
- http://lostmon.blogspot.com/2007/02/mail-searchpl-keywords-variable-cross.html
- 33193 vdb-entry
- 24155 third-party-advisory