CVE-2010-3201

Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.

• netwin surgemail (<= 4.2d4-4) • netwin surgemail 1.0c • netwin surgemail 1.0d • netwin surgemail 1.1a • netwin surgemail 1.1b • netwin surgemail 1.1c • netwin surgemail 1.1d • netwin surgemail 1.2a • netwin surgemail 1.2b • netwin surgemail 1.2c • netwin surgemail 1.3a • netwin surgemail 1.3a rc1 • netwin surgemail 1.3b • netwin surgemail 1.3c • netwin surgemail 1.3d • netwin surgemail 1.3e • netwin surgemail 1.3f • netwin surgemail 1.3g • netwin surgemail 1.3h • netwin surgemail 1.3i • netwin surgemail 1.3j • netwin surgemail 1.3k • netwin surgemail 1.3l • netwin surgemail 1.4a • netwin surgemail 1.4b • netwin surgemail 1.4c • netwin surgemail 1.5a • netwin surgemail 1.5b • netwin surgemail 1.5c • netwin surgemail 1.5d • netwin surgemail 1.5d2 • netwin surgemail 1.5f • netwin surgemail 1.6a • netwin surgemail 1.6b • netwin surgemail 1.6d • netwin surgemail 1.6e • netwin surgemail 1.6e2 • netwin surgemail 1.7a • netwin surgemail 1.7b3 • netwin surgemail 1.8a • netwin surgemail 1.8b3 • netwin surgemail 1.8d • netwin surgemail 1.8e • netwin surgemail 1.8f • netwin surgemail 1.8g3 • netwin surgemail 1.9 • netwin surgemail 1.9b2 • netwin surgemail 2.0a2 • netwin surgemail 2.0c • netwin surgemail 2.0e • netwin surgemail 2.0g2 • netwin surgemail 2.1a • netwin surgemail 2.1c7 • netwin surgemail 2.2a6 • netwin surgemail 2.2c9 • netwin surgemail 2.2c10 • netwin surgemail 2.2g2 • netwin surgemail 2.2g3 • netwin surgemail 3.0a • netwin surgemail 3.0c2 … and 49 more