CVE-2008-5769 | BDVDB-2026-34104 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/32863
http://secunia.com/advisories/32955
https://exchange.xforce.ibmcloud.com/vulnerabilities/47397
http://www.kerio.com/security_advisory.html
http://www.kerio.com/kms_history.html
http://www.vupen.com/english/advisories/2008/3442

Exploit#

No public exploit known

History#

Version 12008-12-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.