CVEvulnerability

CVE-2007-3170

4.3 MEDIUM Published 2007-06-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-06-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to redirect.php or (2) the selected_theme parameter to demo/pop3/error.php.

Affected configurations

• uebimiau uebimiau 2.7.2 • uebimiau uebimiau 2.7.9 • uebimiau uebimiau 2.7.10

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html Exploit
http://osvdb.org/37463 osvdb.org
http://osvdb.org/37464 osvdb.org
http://www.securityfocus.com/bid/24210 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/34553 exchange.xforce.ibmcloud.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html Exploit
http://osvdb.org/37463 osvdb.org
http://osvdb.org/37464 osvdb.org
http://www.securityfocus.com/bid/24210 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/34553 exchange.xforce.ibmcloud.com