CVE-2005-0846 | BDVDB-2026-9002 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=
http://marc.info/?l=bugtraq&m=111159967417903&w=2
http://secunia.com/advisories/14658
http://www.security.org.sg/vuln/surgemail22g3.html

Exploit#

No public exploit known

History#

Version 12005-03-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.