CVE-2010-3201

Published: Jan 7, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.

Affected (109)

Products: Netwin: Surgemail

Netwin

1 product

Surgemail

Configuration A

109 vulnerable

Vulnerable Software	Affected Versions
Netwin Surgemail	Up to 4.2d4-4
Netwin Surgemail	Version 1.0c
Netwin Surgemail	Version 1.0d
Netwin Surgemail	Version 1.1a
Netwin Surgemail	Version 1.1b
Netwin Surgemail	Version 1.1c
Netwin Surgemail	Version 1.1d
Netwin Surgemail	Version 1.2a
Netwin Surgemail	Version 1.2b
Netwin Surgemail	Version 1.2c
Netwin Surgemail	Version 1.3a
Netwin Surgemail	Version 1.3a_rc1
Netwin Surgemail	Version 1.3b
Netwin Surgemail	Version 1.3c
Netwin Surgemail	Version 1.3d
Netwin Surgemail	Version 1.3e
Netwin Surgemail	Version 1.3f
Netwin Surgemail	Version 1.3g
Netwin Surgemail	Version 1.3h
Netwin Surgemail	Version 1.3i
Netwin Surgemail	Version 1.3j
Netwin Surgemail	Version 1.3k
Netwin Surgemail	Version 1.3l
Netwin Surgemail	Version 1.4a
Netwin Surgemail	Version 1.4b
Netwin Surgemail	Version 1.4c
Netwin Surgemail	Version 1.5a
Netwin Surgemail	Version 1.5b
Netwin Surgemail	Version 1.5c
Netwin Surgemail	Version 1.5d2
Netwin Surgemail	Version 1.5d
Netwin Surgemail	Version 1.5f
Netwin Surgemail	Version 1.6a
Netwin Surgemail	Version 1.6b
Netwin Surgemail	Version 1.6d
Netwin Surgemail	Version 1.6e2
Netwin Surgemail	Version 1.6e
Netwin Surgemail	Version 1.7a
Netwin Surgemail	Version 1.7b3
Netwin Surgemail	Version 1.8a
Netwin Surgemail	Version 1.8b3
Netwin Surgemail	Version 1.8d
Netwin Surgemail	Version 1.8e
Netwin Surgemail	Version 1.8f
Netwin Surgemail	Version 1.8g3
Netwin Surgemail	Version 1.9
Netwin Surgemail	Version 1.9b2
Netwin Surgemail	Version 2.0a2
Netwin Surgemail	Version 2.0c
Netwin Surgemail	Version 2.0e
Netwin Surgemail	Version 2.0g2
Netwin Surgemail	Version 2.1a
Netwin Surgemail	Version 2.1c7
Netwin Surgemail	Version 2.2a6
Netwin Surgemail	Version 2.2c10
Netwin Surgemail	Version 2.2c9
Netwin Surgemail	Version 2.2g2
Netwin Surgemail	Version 2.2g3
Netwin Surgemail	Version 3.0a
Netwin Surgemail	Version 3.0c2
Netwin Surgemail	Version 3.1s
Netwin Surgemail	Version 3.2e
Netwin Surgemail	Version 3.5a
Netwin Surgemail	Version 3.5b3
Netwin Surgemail	Version 3.6d
Netwin Surgemail	Version 3.6f3
Netwin Surgemail	Version 3.6f5
Netwin Surgemail	Version 3.6f7
Netwin Surgemail	Version 3.7b3
Netwin Surgemail	Version 3.7b5
Netwin Surgemail	Version 3.7b6
Netwin Surgemail	Version 3.7b7
Netwin Surgemail	Version 3.7b8
Netwin Surgemail	Version 3.7b
Netwin Surgemail	Version 3.8a
Netwin Surgemail	Version 3.8b
Netwin Surgemail	Version 3.8d
Netwin Surgemail	Version 3.8f2
Netwin Surgemail	Version 3.8f3
Netwin Surgemail	Version 3.8f
Netwin Surgemail	Version 3.8i2
Netwin Surgemail	Version 3.8i3
Netwin Surgemail	Version 3.8i
Netwin Surgemail	Version 3.8k2
Netwin Surgemail	Version 3.8k3
Netwin Surgemail	Version 3.8k4
Netwin Surgemail	Version 3.8k
Netwin Surgemail	Version 3.8m
Netwin Surgemail	Version 3.8o
Netwin Surgemail	Version 3.8q
Netwin Surgemail	Version 3.8s
Netwin Surgemail	Version 3.8u
Netwin Surgemail	Version 3.9a
Netwin Surgemail	Version 3.9c
Netwin Surgemail	Version 3.9e
Netwin Surgemail	Version 3.9g2
Netwin Surgemail	Version 3.9g
Netwin Surgemail	Version 4.0a
Netwin Surgemail	Version 4.0k
Netwin Surgemail	Version 4.0u3
Netwin Surgemail	Version 4.0u4
Netwin Surgemail	Version 4.0v-8
Netwin Surgemail	Version 4.2a2-2
Netwin Surgemail	Version 4.2a2-3
Netwin Surgemail	Version 4.2a3-3
Netwin Surgemail	Version 4.2d-1
Netwin Surgemail	Version 4.2d2-2
Netwin Surgemail	Version 4.2d3-3
Netwin Surgemail	Version beta_3.9a