CVE-2006-6702

Published: Dec 23, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected (8)

Products: Atmail: Atmail Webmail

Atmail

1 product

Atmail Webmail

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Atmail Atmail Webmail	Up to 4.6
Atmail Atmail Webmail	Version 4.11
Atmail Atmail Webmail	Version 4.1
Atmail Atmail Webmail	Version 4.2
Atmail Atmail Webmail	Version 4.3
Atmail Atmail Webmail	Version 4.4
Atmail Atmail Webmail	Version 4.51
Atmail Atmail Webmail	Version 4.5

References (6)

http://kb.atmail.com/view_article.php?num=669

Source: cve@mitre.org

Patch

http://support.atmail.com/changelog.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/5127

Source: cve@mitre.org

http://kb.atmail.com/view_article.php?num=669

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.atmail.com/changelog.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/5127

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.