CVEbuzz logo
This website displays data collected from external sources, and is not responsible for any aspect of it. Read more...

Security / vulnerability advisories for Mailtraq 2.17.3.3150

Titles listed in dictionary

CPE for product: cpe:2.3:a:mailtraq:mailtraq:2.17.3.3150:*:*:*:*:*:*:*

Showing 1-1 of 1
Low damage 4.3
Easy to exploit
(other affected products) Published: Wed Sep 19 10:57:00 2012 UTC. Last Modified: Fri Oct 26 04:00:00 2012 UTC
CPE matches: cpe:2.3:a:mailtraq:mailtraq:2.17.3.3150:*:*:*:*:*:*:*

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary web script or HTML via an e-mail message subject with (1) a JavaScript alert function used in conjunction with the fromCharCode method or (2) a SCRIPT element; an e-mail message body with (3) a crafted SRC attribute of an IFRAME element, (4) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (5) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an IMG element; or an e-mail message Date header with (6) a JavaScript alert function used in conjunction with the fromCharCode method, (7) a SCRIPT element, (8) a CSS expression property in the STYLE attribute of an arbitrary element, (9) a crafted SRC attribute of an IFRAME element, or (10) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.

Damage

Attack conditions

Damage and attack conditions obtained from AV:N/AC:M/Au:N/C:N/I:P/A:N (CVSSv2)

Type of bug(s)

References