CVE-2010-3459

AXIGEN Mail Server <7.4.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (6)

[Vendor Advisory] http://secunia.com/advisories/41430

[Patch, Vendor Advisory] http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html

[Exploit] http://www.securityfocus.com/bid/43230

[Patch, Vendor Advisory] http://www.vupen.com/english/advisories/2010/2415

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/61825

[Third Party Advisory, VDB Entry] http://www.osvdb.org/68026

Scores

EPSS 0.0052

EPSS Percentile 66.4%

Classification

CWE

CWE-79

Status published

Affected Products (50)

gecad/axigen_mail_server < 7.4.1

gecad/axigen_mail_server

... and 35 more

Timeline

Published Sep 17, 2010

Tracked Since Feb 18, 2026