PT-2005-3697
CVE-2005-2820
·
تاريخ النشر
2005-09-07
·
تاريخ التحديث
2017-07-11
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SqWebMail version 5.0.4
Description
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as
[if] and [endif].Recommendations
For SqWebMail version 5.0.4, update to a version that fixes this issue, as the current version allows for the injection of malicious scripts through specially crafted email messages.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾