CVE-2010-5338 | BDVDB-2026-124248 Detail

Description#

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602
https://vuldb.com/?id.142993

Exploit#

No public exploit known

History#

Version 12019-10-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.