QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-6701

Back to search

CVE-2006-6701

Published: Dec 23, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in 5.x before 5.03, allows remote attackers to modify arbitrary settings and perform unauthorized actions as an arbitrary user, as demonstrated using a settings action in the SRC attribute of an IMG element in an HTML e-mail.

VendorProductVersions

n/a

n/a

affected
n/a

References

25328
third-party-advisory
x_refsource_SECUNIA
@mail-unspecified-csrf(31259)
vdb-entry
x_refsource_XF
ADV-2007-1864
vdb-entry
x_refsource_VUPEN
1017435
vdb-entry
x_refsource_SECTRACK
23472
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now