CVE-2007-1991

Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-04-12

Last modified

2024-08-07

Affected products

• Cmailserver (Youngzsoft)

References

• http://secunia.com/advisories/24812
• http://www.securityfocus.com/bid/23363
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33501