CVE-2006-3564 - CVE House
Back to Database
Status published Medium CVE-2006-3564

Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email, (2) cond, or (3) name parameters to (a) addressbook.view.php, (4) the daysprune parameter to (b) index.php, (5) the data[to] parameter to (c) compose.email.php, and (6) the markas parameter to (d) read.markas.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3564

Credits & Attribution

No credits recorded in the NVD database.

References

More from hivemail

View All →
CVE-2006-3566
search.results.php in HiveMail 3.1 and earlier allows remote attackers to...
Medium 5
CVE-2006-3565
SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier...
High 7.5
CVE-2006-0759
Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow...
High 7.5
CVE-2006-0758
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier...
Medium 4.3
CVE-2006-0757
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow...
High 7.5

Affected Vendor

Affected Software

hivemail
Vulnerable Versions:
1.2, 1.3

Timeline

Official Publish: July 13th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.