CVE-2008-5769
Summary
| CVE | CVE-2008-5769 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-12-30 20:30:00 UTC |
| Updated | 2017-08-08 01:33:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3_patch_1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3_patch_1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Kerio MailServer WebMail Multiple Cross Site Scripting Vulnerabilities | BID | www.securityfocus.com | Patch |
| Kerio MailServer WebMail Cross-Site Scripting Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| Kerio Technologies | Technical Support | Security Advisory | CONFIRM | www.kerio.com | Vendor Advisory |
| Kerio Technologies Inc. | Kerio MailServer | Release History | CONFIRM | www.kerio.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.