CVE-2006-6704

Description

Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "unescaped data in the database."

Affected products

• Atmail / atmail_webadmin4.51

References

• MISChttp://terra.calacode.com/mail/docs/changelog.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/31260