CVE-2006-2138 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.

Affected Software

Name	Vendor	Start Version	End Version
Neomail	Neomail	1.29 (including)	1.29 (including)

References

http://secunia.com/advisories/19906
http://securityreason.com/securityalert/827
http://www.aria-security.net/hm/neomail.txt
http://www.securityfocus.com/archive/1/432398/100/0/threaded
http://www.securityfocus.com/bid/17728
http://www.vupen.com/english/advisories/2006/1590
https://exchange.xforce.ibmcloud.com/vulnerabilities/26127
http://secunia.com/advisories/19906
http://securityreason.com/securityalert/827
http://www.aria-security.net/hm/neomail.txt
http://www.securityfocus.com/archive/1/432398/100/0/threaded
http://www.securityfocus.com/bid/17728
http://www.vupen.com/english/advisories/2006/1590
https://exchange.xforce.ibmcloud.com/vulnerabilities/26127

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-2138
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html