CVE-2009-2636

CVE-2009-2636

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/54928 http://secunia.com/advisories/35392 http://www.kerio.com/support/security-advisories#0906 http://www.securityfocus.com/bid/35264 http://www.securitytracker.com/id?1022348