QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-7966

Back to search

CVE-2016-7966

Published: Dec 23, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.

VendorProductVersions

n/a

n/a

affected
n/a

References

93360
vdb-entry
x_refsource_BID
FEDORA-2016-92c112a380
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2016:2559
vendor-advisory
x_refsource_SUSE
DSA-3697
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now