CVE-2006-3233

Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the to and from fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE.

Affected Software

Name	Vendor	Start Version	End Version
Open_webmail	Open_webmail	*	2.52 (including)
Open_webmail	Open_webmail	1.7 (including)	1.7 (including)
Open_webmail	Open_webmail	1.8 (including)	1.8 (including)
Open_webmail	Open_webmail	1.71 (including)	1.71 (including)
Open_webmail	Open_webmail	1.81 (including)	1.81 (including)
Open_webmail	Open_webmail	1.90 (including)	1.90 (including)
Open_webmail	Open_webmail	2.5 (including)	2.5 (including)
Open_webmail	Open_webmail	2.20 (including)	2.20 (including)
Open_webmail	Open_webmail	2.21 (including)	2.21 (including)
Open_webmail	Open_webmail	2.30 (including)	2.30 (including)
Open_webmail	Open_webmail	2.31 (including)	2.31 (including)
Open_webmail	Open_webmail	2.32 (including)	2.32 (including)
Open_webmail	Open_webmail	2.41 (including)	2.41 (including)
Open_webmail	Open_webmail	2.51 (including)	2.51 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3233
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References