Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aeromail | Aeromail | 1.02 (including) | 1.02 (including) |
| Aeromail | Aeromail | 1.10 (including) | 1.10 (including) |
| Aeromail | Aeromail | 1.20 (including) | 1.20 (including) |
| Aeromail | Aeromail | 1.26 (including) | 1.26 (including) |
| Aeromail | Aeromail | 1.30 (including) | 1.30 (including) |
| Aeromail | Aeromail | 1.40 (including) | 1.40 (including) |