Unrated severityNVD Advisory· Published Jun 27, 2006· Updated Apr 16, 2026
CVE-2006-3229
CVE-2006-3229
Description
Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."
Affected products
14cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*range: <=2.52
- cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*
- cpe:2.3:a:open_webmail:open_webmail:2.51:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.attrition.org/pipermail/vim/2006-June/000902.htmlnvdPatch
- openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-main.plnvd
- openwebmail.org/openwebmail/doc/changes.txtnvd
- secunia.com/advisories/20714nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27309nvd
News mentions
0No linked articles in our index yet.