CVE-2007-3170

Published: 11/06/2007 Updated: 29/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote malicious users to inject arbitrary web script or HTML via (1) the PATH_INFO to redirect.php or (2) the selected_theme parameter to demo/pop3/error.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
uebimiau uebimiau 2.7.10
uebimiau uebimiau 2.7.9
uebimiau uebimiau 2.7.2

source: wwwsecurityfocuscom/bid/24210/info Uebimiau is prone to multiple input-validation vulnerabilities, including cross-site scripting issues and an information-disclosure issue, because the application fails to properly sanitize user-supplied input Attackers can exploit these issues to steal cookie-based authentication credentials, ...

NVD-CWE-Other http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html http://www.securityfocus.com/bid/24210 http://osvdb.org/37463 http://osvdb.org/37464 https://exchange.xforce.ibmcloud.com/vulnerabilities/34553 https://nvd.nist.gov https://www.exploit-db.com/exploits/30097/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3170

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect