CVE-2006-2484
Published May 19, 2006
Last updated 6 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:icewarp:web_mail:1.40.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645A57E0-F473-4373-9533-B03EA22E6976"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:1.40.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8A88549-6BCC-4091-887B-EDFD6FB53610"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "654895AA-76FE-4773-A338-C2F2CFD8C26F"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CC0BB2C-3513-4E4C-9E4A-A0826934F664"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "729776E8-2BBD-41A0-860C-11A84AA16285"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE807278-AEF4-4174-A1ED-C9819E39218C"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF09CE36-8053-4784-AB2A-FC2BAEBD135D"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "484F6B5E-2DDE-45EE-955E-7DC08B5D0D1F"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:4.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "096D978E-A8C2-47DE-803A-C200DF21F753"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:4.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0714F080-A5EE-4B06-AA77-DD8CC1056B2A"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "559FAE27-0092-4C36-9D21-4E79696B7EC1"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A024C321-E1DD-409E-9E0D-CC2C1E41123B"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "468F8C45-6E74-4490-83EB-4B566FE94BF2"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EFBAF4F-2B71-4BAB-A3C2-AB7249B1F81B"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49CB8216-BF0A-4BFA-8CFB-0B5D718652D5"
},
{
"criteria": "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17A1B67D-FE00-4E52-9947-577A0552C01E"
}
],
"operator": "OR"
}
]
}
]