CVE-2006-0758

published 2006-02-18

CVE-2006-0758: Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded…

Priority P4 19 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

EXPLOIT

Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts, which is not properly cleansed when accessed from the $_SERVER['PHP_SELF'] variable.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—
hivemail	hivemail	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.