CVE-2007-5290

Exploitation Summary

EIP tracks 2 public exploits for CVE-2007-5290. PoCs published by Ivan Sanchez.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in MailBee WebMail Pro 3.4 and prior versions. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.

Description

Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.

Exploits (2)

exploitdb WRITEUP VERIFIED

by Ivan Sanchez · textwebappsphp

https://www.exploit-db.com/exploits/30641

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in MailBee WebMail Pro 3.4 and prior versions. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: MailBee WebMail Pro 3.4 and prior

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →