CVE-2006-6364

Published: Dec 7, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.

Affected (1)

Products: Inside Systems: Inside Systems

Inside Systems

1 product

Inside Systems

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Inside Systems Inside Systems	Version mail_2.0

References (14)

http://secunia.com/advisories/23229

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/1990

Source: cve@mitre.org

http://www.insidesystems.net/projects/project.php?projectid=4

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/453420/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21424

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4848

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30704

Source: cve@mitre.org

http://secunia.com/advisories/23229