CVE-2006-3229

Published: Jun 27, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."

Affected (14)

Products: Open Webmail: Open Webmail

Open Webmail

1 product

Open Webmail

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Open Webmail Open Webmail	Up to 2.52
Open Webmail Open Webmail	Version 1.71
Open Webmail Open Webmail	Version 1.7
Open Webmail Open Webmail	Version 1.81
Open Webmail Open Webmail	Version 1.8
Open Webmail Open Webmail	Version 1.90
Open Webmail Open Webmail	Version 2.20
Open Webmail Open Webmail	Version 2.21
Open Webmail Open Webmail	Version 2.30
Open Webmail Open Webmail	Version 2.31
Open Webmail Open Webmail	Version 2.32
Open Webmail Open Webmail	Version 2.41
Open Webmail Open Webmail	Version 2.51
Open Webmail Open Webmail	Version 2.5