CVE-2006-5652

Currently unrated

Key Information:

Vendor
Oracle
Status
Iplanet Messaging Server Messenger Express
Vendor
CVE Published:
3 November 2006

Summary

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29929
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/20838
vdb-entryx_refsource_BID
http://lists.grok.org.uk/pipermail/full-disclosure/2006-O...
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.