Intrusion PreventionSqWebMail.Email.Header.HTML.Injection
Description
It indicates a possible exploit of Cross-Site Scripting vulnerability in SqWebMail that may allow attacker to gain access to an unsuspecting users cookie via a crafted email header.
Affected Products
Inter7 SqWebMail 4.0.4.
Impact
Information based on cookies disclosue.
Recommended Actions
Upgrade to version 4.0.5 or later.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 10536 |
| Created | Aug 10, 2005 |
| Updated | Jul 07, 2022 |
| Risk |
|
| CVE ID | CVE-2004-0591 |
| Exploit Prediction Score | 91.61% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | CGI_app |