Back to Database
Status published
Medium
CVE-2006-6702
Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6702
Credits & Attribution
No credits recorded in the NVD database.
References
More from atmail
View All →CVE-2022-31200
Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field....
Medium
6.1
CVE-2022-30776
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter....
Medium
6.1
CVE-2021-43574
WebAdmin Control Panel in Atmail 6.5.0 (a version released in...
Medium
6.1
CVE-2017-9519
atmail before 7.8.0.2 has CSRF, allowing an attacker to create...
High
8.8
CVE-2017-9518
atmail before 7.8.0.2 has CSRF, allowing an attacker to change...
High
8.8
Affected Vendor
atmail
View all reports →Affected Software
atmail webmail
Vulnerable Versions:
0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.11, 4.51
Timeline
Official Publish:
December 23rd, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.