CVE-2006-3108
https://notcve.org/view.php?id=CVE-2006-3108
Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter. Vulnerabilidad cross-site scripting (XSS) en Servidor de correo electrónico Emailarchitect v6.1 permite a atacantes remotos la ejecución de JavaScript arbitrario a través de una etiqueta div HTML con un retorno de carro entre el atributo onmouseover y su valor, que no pasa por el filtro de correo. • http://securitytracker.com/id?1016243 •
CVE-2006-2974
https://notcve.org/view.php?id=CVE-2006-2974
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid parameter in (a) default.asp and (3) dname parameter in (b) /admin/dns.asp and (c) /additional/regdomain_done.asp. • http://secunia.com/advisories/20516 http://securitytracker.com/id?1016237 http://www.vupen.com/english/advisories/2006/2213 https://exchange.xforce.ibmcloud.com/vulnerabilities/27005 •