CVE-2006-3095

Published: Jun 19, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm.

Affected (1)

Products: Ipostmx: Ipostmx 2005

Ipostmx

1 product

Ipostmx 2005

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ipostmx Ipostmx 2005	version ≤ 2.0

References (14)

http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20697

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/26522

Source: cve@mitre.org

http://www.osvdb.org/26523

Source: cve@mitre.org

http://www.securityfocus.com/bid/18460

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2382

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27140

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html