Test ID:	1.3.6.1.4.1.25623.1.0.16463
Category:	Web application abuses
Title:	Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability
Summary:	The remote webmail server is affected by a cross-site scripting flaw.;; The remote host is running at least one instance of Open WebMail that; fails to sufficiently validate user input supplied to the 'logindomain'; parameter. This failure enables an attacker to run arbitrary script; code in the context of a user's web browser.
Description:	Summary: The remote webmail server is affected by a cross-site scripting flaw. The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. Solution: Upgrade to Open WebMail version 2.50 20040212 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0445 BugTraq ID: 12547 http://www.securityfocus.com/bid/12547 http://securitytracker.com/id?1013172 http://secunia.com/advisories/14253 XForce ISS Database: open-webmail-logindomain-xss(19335) https://exchange.xforce.ibmcloud.com/vulnerabilities/19335
Copyright	Copyright (C) 2005 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.