CVE-2006-3564
Summary
| CVE | CVE-2006-3564 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-13 01:05:00 UTC |
| Updated | 2017-07-20 01:32:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email, (2) cond, or (3) name parameters to (a) addressbook.view.php, (4) the daysprune parameter to (b) index.php, (5) the data[to] parameter to (c) compose.email.php, and (6) the markas parameter to (d) read.markas.php. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 27102 | OSVDB | www.osvdb.org | |
| - UNSECURED SYSTEMS -: HiveMail vuln. | MISC | pridels0.blogspot.com | |
| HiveMail Multiple Input Validation Vulnerabilities | BID | www.securityfocus.com | |
| 27100 | OSVDB | www.osvdb.org | |
| HiveMail Cross-Site Scripting and SQL Injection Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| SecurityTracker.com Archives - HiveMail Input Validation Holes Permit Cross-Site Scripting and SQL Injection Attacks | SECTRACK | securitytracker.com | |
| 27103 | OSVDB | www.osvdb.org | |
| 27101 | OSVDB | www.osvdb.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.