Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified e-mail fields, a different vulnerability than CVE-2008-2248.
References
- ADV-2008-2021 vdb-entry
- exchange-owa-email-fields-xss(43328) vdb-entry
- 1020439 vdb-entry
- 30130 vdb-entry
- oval:org.mitre.oval:def:5354 vdb-entry signature
- MS08-039 vendor-advisory
- 30964 third-party-advisory
- TA08-190A third-party-advisory