CVE-2006-5712 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.7% (pctl 76)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.66% — more likely to be exploited than 76% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-11-04 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| mirapoint | mirapoint webmail |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Mirapoint Web Mail - 'Expression()' HTML Injection | 2006-10-31 |
References
- http://marc.info/?l=full-disclosure&m=116232831525086&w=2
- http://osvdb.org/33820
- http://securitytracker.com/id?1017146
- http://www.securityfocus.com/bid/20840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29928
- http://marc.info/?l=full-disclosure&m=116232831525086&w=2
- http://osvdb.org/33820
- http://securitytracker.com/id?1017146
- http://www.securityfocus.com/bid/20840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29928
→ the Explorer · watch your stack · NVD