CVE-2006-3108

Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2006-06-21

Last modified

2024-09-16

Affected products

• Email Server (Emailarchitect)

References

• http://securitytracker.com/id?1016243