4.3
CVSSv2

CVE-2006-0469

Published: 30/01/2006 Updated: 19/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote malicious users to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag.

Vulnerable Product Search on Vulmon Subscribe to Product

uebimiau uebimiau 2.7.9

Exploits

#!/usr/bin/python ''' # Exploit Title: Uebimiau Webmail Stored XSS # Date: 17/08/2012 # Exploit Author: Shai rod (@NightRang3r) # Vendor Homepage: wwwuebimiauorg/ # Software Link: wwwuebimiauorg/downloads/uebimiau-272-anyzip # Version: 272 #Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar About the Applicat ...