CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3229

Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2006-3229

Open Webmail » Open Webmail » Version: Any

cpe:2.3:a:open_webmail:open_webmail:*
Open Webmail » Open Webmail » Version: 1.7

cpe:2.3:a:open_webmail:open_webmail:1.7
Open Webmail » Open Webmail » Version: 1.71

cpe:2.3:a:open_webmail:open_webmail:1.71
Open Webmail » Open Webmail » Version: 1.8

cpe:2.3:a:open_webmail:open_webmail:1.8
Open Webmail » Open Webmail » Version: 1.81

cpe:2.3:a:open_webmail:open_webmail:1.81
Open Webmail » Open Webmail » Version: 1.90

cpe:2.3:a:open_webmail:open_webmail:1.90
Open Webmail » Open Webmail » Version: 2.20

cpe:2.3:a:open_webmail:open_webmail:2.20
Open Webmail » Open Webmail » Version: 2.21

cpe:2.3:a:open_webmail:open_webmail:2.21
Open Webmail » Open Webmail » Version: 2.30

cpe:2.3:a:open_webmail:open_webmail:2.30
Open Webmail » Open Webmail » Version: 2.31

cpe:2.3:a:open_webmail:open_webmail:2.31
Open Webmail » Open Webmail » Version: 2.32

cpe:2.3:a:open_webmail:open_webmail:2.32
Open Webmail » Open Webmail » Version: 2.41

cpe:2.3:a:open_webmail:open_webmail:2.41
Open Webmail » Open Webmail » Version: 2.5

cpe:2.3:a:open_webmail:open_webmail:2.5
Open Webmail » Open Webmail » Version: 2.51

cpe:2.3:a:open_webmail:open_webmail:2.51

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3229

Products

Pricing

Contact Us