CVE-2006-3305 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10 and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f_user parameter in index.php the (2) pag parameter in messages.php or the (3) lid (4) tid and (5) sid parameters in error.php.

Reference

http://pridels0.blogspot.com/2006/06/uebimiau-webmail-xss-vuln.html http://secunia.com/advisories/20804 http://www.securityfocus.com/bid/18643 http://www.securityfocus.com/bid/22375 http://www.vupen.com/english/advisories/2006/2513 https://exchange.xforce.ibmcloud.com/vulnerabilities/27371