CVE-2008-5769
Summary
| CVE | CVE-2008-5769 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-12-30 20:30:01 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.3_patch_1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.1.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.2.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.3.1_p2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.4.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.5.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.6.0 | patch_1 | All | All |
| Application | Kerio | Kerio Mailserver | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Kerio Technologies Inc. | Kerio MailServer | Release History | af854a3a-2127-422b-91ae-364da2661108 | www.kerio.com | |
| Kerio MailServer WebMail Multiple Cross Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| Kerio MailServer WebMail Cross-Site Scripting Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Kerio Technologies | Technical Support | Security Advisory | af854a3a-2127-422b-91ae-364da2661108 | www.kerio.com | Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.