VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 21, 2006· Updated Jun 16, 2026

CVE-2006-3108

CVE-2006-3108

Description

Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter.

Affected products

2
  • Emailarchitect/Email Server2 versions
    cpe:2.3:a:emailarchitect:email_server:6.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:emailarchitect:email_server:6.1:*:*:*:*:*:*:*
    • (no CPE)range: = 6.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.