Unscored CVE-2007-1991 EUVD-2007-1985GHSA-q866-9m3h-92xr

Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to …

Published Apr 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927.

References

cmailserver-signup-xss(33501) vdb-entry
23363 vdb-entry
24812 third-party-advisory