IPostMX 2005 Userlogin.CFM and Account.CFM Cross-Site Scripting Vulnerabilities

Bugtraq ID:	18460
Class:	Input Validation Error
CVE:	CVE-2006-3095
Remote:	Yes
Local:	No
Published:	Jun 15 2006 12:00AM
Updated:	Jul 06 2016 01:33PM
Credit:	r0t is credited with the discovery of these vulnerabilities.
Vulnerable:	Cole Barksdale iPostMX 2005 0
Not Vulnerable:

IPostMX 2005 Userlogin.CFM and Account.CFM Cross-Site Scripting Vulnerabilities

IPostmx 2005 is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the webserver process. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

IPostMX 2005 Userlogin.CFM and Account.CFM Cross-Site Scripting Vulnerabilities

This issue can be exploited through a web client.

IPostMX 2005 Userlogin.CFM and Account.CFM Cross-Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

IPostMX 2005 Userlogin.CFM and Account.CFM Cross-Site Scripting Vulnerabilities

References:

• iPostMX 2005 vuln (r0t)
  
• IPostMX Homepage (iPostMX)