CVE-2006-5652 | BDVDB-2026-20090 Detail

Description#

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/29929
http://www.securityfocus.com/bid/20838
http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html
http://www.securityfocus.com/archive/1/450184/100/0/threaded
http://securityreason.com/securityalert/1806

Exploit#

No public exploit known

History#

Version 12006-11-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.