CVE-2006-3229

Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to openwebmailerror calls that need to display HTML.

Affected Software

Name	Vendor	Start Version	End Version
Open_webmail	Open_webmail	*	2.52 (including)
Open_webmail	Open_webmail	1.7 (including)	1.7 (including)
Open_webmail	Open_webmail	1.8 (including)	1.8 (including)
Open_webmail	Open_webmail	1.71 (including)	1.71 (including)
Open_webmail	Open_webmail	1.81 (including)	1.81 (including)
Open_webmail	Open_webmail	1.90 (including)	1.90 (including)
Open_webmail	Open_webmail	2.5 (including)	2.5 (including)
Open_webmail	Open_webmail	2.20 (including)	2.20 (including)
Open_webmail	Open_webmail	2.21 (including)	2.21 (including)
Open_webmail	Open_webmail	2.30 (including)	2.30 (including)
Open_webmail	Open_webmail	2.31 (including)	2.31 (including)
Open_webmail	Open_webmail	2.32 (including)	2.32 (including)
Open_webmail	Open_webmail	2.41 (including)	2.41 (including)
Open_webmail	Open_webmail	2.51 (including)	2.51 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3229
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References