CVE-2005-0320

Description

Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/19147

http://www.securityfocus.com/bid/12396

http://marc.info/?l=bugtraq&m=110693950205007&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3