Unscored severity · published Jul 12, 2006
CVE-2006-3522
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mimesweeper For Web · Clearswift
through 5.1.14 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3522
Patch
http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm
marc.info
http://marc.info/?l=full-disclosure&m=115249298204354&w=2
marc.info
http://marc.info/?l=full-disclosure&m=115253320721404&w=2
marc.info
http://marc.info/?l=full-disclosure&m=115253898206225&w=2
Patch
http://secunia.com/advisories/20998
securitytracker.com
http://securitytracker.com/id?1016454
More from Mimesweeper For Web
–
CVE-2006-3523
Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which triggers a scan error…
–
CVE-2005-4526
Clearswift MIMEsweeper For Web (a.k.a
–
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by…
–
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot…