Published: 09/10/2007 Updated: 29/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and previous versions; and possibly MailBee WebMail Pro ASP prior to 3.4.64, WebMail Lite ASP prior to 4.0.11, and WebMail Lite PHP prior to 4.0.22; allow remote malicious users to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.

Vulnerable Product	Search on Vulmon	Subscribe to Product
afterlogic mailbee webmail
afterlogic mailbee webmail 3.4
afterlogic mailbee webmail 3.2
afterlogic mailbee webmail 3.3
afterlogic mailbee webmail 3.1

source: wwwsecurityfocuscom/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks These issues affect MailBee W ...

source: wwwsecurityfocuscom/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks These issues affect MailBe ...

CWE-79 http://marc.info/?l=bugtraq&m=119161078031690&w=2 http://www.securityfocus.com/bid/25942 http://www.securitytracker.com/id?1018783 http://secunia.com/advisories/27073 http://osvdb.org/37650 http://osvdb.org/37649 http://www.vupen.com/english/advisories/2007/3450 https://exchange.xforce.ibmcloud.com/vulnerabilities/36979 https://nvd.nist.gov https://www.exploit-db.com/exploits/30641/

CVE-2007-5290

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect