CVE-2006-0091

Open-Xchange < 0.8.1.6 - Cross-Site Scripting via Email Attachment Rendering

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline.

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=113629092325679&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015431
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18285
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0034

Scores

EPSS 0.0035
EPSS Percentile 57.3%

Details

Status published
Products (1)
open-xchange/open-xchange < 0.8.1.6
Published Jan 05, 2006
Tracked Since Feb 18, 2026