CVE-2008-5769

Kerio MailServer <6.6.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information.

References (6)

Scores

EPSS 0.0052
EPSS Percentile 66.3%

Classification

CWE
CWE-79
Status published

Affected Products (50)

kerio/kerio_mailserver < 6.6.1
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
kerio/kerio_mailserver
... and 35 more

Timeline

Published Dec 30, 2008
Tracked Since Feb 18, 2026