CVE-2007-5290

EPSS 3.8%

Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/30642unverified exploitdbwww.exploit-db.com/exploits/30641unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=119161078031690&w=2 http://osvdb.org/37649 http://osvdb.org/37650 http://secunia.com/advisories/27073 https://exchange.xforce.ibmcloud.com/vulnerabilities/36979 http://www.securityfocus.com/bid/25942 http://www.securitytracker.com/id?1018783 http://www.vupen.com/english/advisories/2007/3450