// For flags

CVE-2010-3201

Surgemail SurgeWeb 4.3e - Cross-Site Scripting

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

3
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.

Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en NetWin Surgemail anterirores a v4.3g permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro username_ex sobre el programa surgeweb.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-08-31 CVE Reserved
  • 2011-01-07 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
<= 4.2d4-4
Search vendor "Netwin" for product "Surgemail" and version " <= 4.2d4-4"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.0c
Search vendor "Netwin" for product "Surgemail" and version "1.0c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.0d
Search vendor "Netwin" for product "Surgemail" and version "1.0d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.1a
Search vendor "Netwin" for product "Surgemail" and version "1.1a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.1b
Search vendor "Netwin" for product "Surgemail" and version "1.1b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.1c
Search vendor "Netwin" for product "Surgemail" and version "1.1c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.1d
Search vendor "Netwin" for product "Surgemail" and version "1.1d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.2a
Search vendor "Netwin" for product "Surgemail" and version "1.2a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.2b
Search vendor "Netwin" for product "Surgemail" and version "1.2b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.2c
Search vendor "Netwin" for product "Surgemail" and version "1.2c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3a
Search vendor "Netwin" for product "Surgemail" and version "1.3a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3a_rc1
Search vendor "Netwin" for product "Surgemail" and version "1.3a_rc1"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3b
Search vendor "Netwin" for product "Surgemail" and version "1.3b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3c
Search vendor "Netwin" for product "Surgemail" and version "1.3c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3d
Search vendor "Netwin" for product "Surgemail" and version "1.3d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3e
Search vendor "Netwin" for product "Surgemail" and version "1.3e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3f
Search vendor "Netwin" for product "Surgemail" and version "1.3f"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3g
Search vendor "Netwin" for product "Surgemail" and version "1.3g"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3h
Search vendor "Netwin" for product "Surgemail" and version "1.3h"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3i
Search vendor "Netwin" for product "Surgemail" and version "1.3i"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3j
Search vendor "Netwin" for product "Surgemail" and version "1.3j"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3k
Search vendor "Netwin" for product "Surgemail" and version "1.3k"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.3l
Search vendor "Netwin" for product "Surgemail" and version "1.3l"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.4a
Search vendor "Netwin" for product "Surgemail" and version "1.4a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.4b
Search vendor "Netwin" for product "Surgemail" and version "1.4b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.4c
Search vendor "Netwin" for product "Surgemail" and version "1.4c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5a
Search vendor "Netwin" for product "Surgemail" and version "1.5a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5b
Search vendor "Netwin" for product "Surgemail" and version "1.5b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5c
Search vendor "Netwin" for product "Surgemail" and version "1.5c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5d
Search vendor "Netwin" for product "Surgemail" and version "1.5d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5d2
Search vendor "Netwin" for product "Surgemail" and version "1.5d2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.5f
Search vendor "Netwin" for product "Surgemail" and version "1.5f"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.6a
Search vendor "Netwin" for product "Surgemail" and version "1.6a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.6b
Search vendor "Netwin" for product "Surgemail" and version "1.6b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.6d
Search vendor "Netwin" for product "Surgemail" and version "1.6d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.6e
Search vendor "Netwin" for product "Surgemail" and version "1.6e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.6e2
Search vendor "Netwin" for product "Surgemail" and version "1.6e2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.7a
Search vendor "Netwin" for product "Surgemail" and version "1.7a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.7b3
Search vendor "Netwin" for product "Surgemail" and version "1.7b3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8a
Search vendor "Netwin" for product "Surgemail" and version "1.8a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8b3
Search vendor "Netwin" for product "Surgemail" and version "1.8b3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8d
Search vendor "Netwin" for product "Surgemail" and version "1.8d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8e
Search vendor "Netwin" for product "Surgemail" and version "1.8e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8f
Search vendor "Netwin" for product "Surgemail" and version "1.8f"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.8g3
Search vendor "Netwin" for product "Surgemail" and version "1.8g3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.9
Search vendor "Netwin" for product "Surgemail" and version "1.9"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
1.9b2
Search vendor "Netwin" for product "Surgemail" and version "1.9b2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.0a2
Search vendor "Netwin" for product "Surgemail" and version "2.0a2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.0c
Search vendor "Netwin" for product "Surgemail" and version "2.0c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.0e
Search vendor "Netwin" for product "Surgemail" and version "2.0e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.0g2
Search vendor "Netwin" for product "Surgemail" and version "2.0g2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.1a
Search vendor "Netwin" for product "Surgemail" and version "2.1a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.1c7
Search vendor "Netwin" for product "Surgemail" and version "2.1c7"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.2a6
Search vendor "Netwin" for product "Surgemail" and version "2.2a6"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.2c9
Search vendor "Netwin" for product "Surgemail" and version "2.2c9"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.2c10
Search vendor "Netwin" for product "Surgemail" and version "2.2c10"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.2g2
Search vendor "Netwin" for product "Surgemail" and version "2.2g2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
2.2g3
Search vendor "Netwin" for product "Surgemail" and version "2.2g3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.0a
Search vendor "Netwin" for product "Surgemail" and version "3.0a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.0c2
Search vendor "Netwin" for product "Surgemail" and version "3.0c2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.1s
Search vendor "Netwin" for product "Surgemail" and version "3.1s"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.2e
Search vendor "Netwin" for product "Surgemail" and version "3.2e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.5a
Search vendor "Netwin" for product "Surgemail" and version "3.5a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.5b3
Search vendor "Netwin" for product "Surgemail" and version "3.5b3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.6d
Search vendor "Netwin" for product "Surgemail" and version "3.6d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.6f3
Search vendor "Netwin" for product "Surgemail" and version "3.6f3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.6f5
Search vendor "Netwin" for product "Surgemail" and version "3.6f5"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.6f7
Search vendor "Netwin" for product "Surgemail" and version "3.6f7"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b
Search vendor "Netwin" for product "Surgemail" and version "3.7b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b3
Search vendor "Netwin" for product "Surgemail" and version "3.7b3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b5
Search vendor "Netwin" for product "Surgemail" and version "3.7b5"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b6
Search vendor "Netwin" for product "Surgemail" and version "3.7b6"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b7
Search vendor "Netwin" for product "Surgemail" and version "3.7b7"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.7b8
Search vendor "Netwin" for product "Surgemail" and version "3.7b8"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8a
Search vendor "Netwin" for product "Surgemail" and version "3.8a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8b
Search vendor "Netwin" for product "Surgemail" and version "3.8b"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8d
Search vendor "Netwin" for product "Surgemail" and version "3.8d"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8f
Search vendor "Netwin" for product "Surgemail" and version "3.8f"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8f2
Search vendor "Netwin" for product "Surgemail" and version "3.8f2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8f3
Search vendor "Netwin" for product "Surgemail" and version "3.8f3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8i
Search vendor "Netwin" for product "Surgemail" and version "3.8i"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8i2
Search vendor "Netwin" for product "Surgemail" and version "3.8i2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8i3
Search vendor "Netwin" for product "Surgemail" and version "3.8i3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8k
Search vendor "Netwin" for product "Surgemail" and version "3.8k"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8k2
Search vendor "Netwin" for product "Surgemail" and version "3.8k2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8k3
Search vendor "Netwin" for product "Surgemail" and version "3.8k3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8k4
Search vendor "Netwin" for product "Surgemail" and version "3.8k4"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8m
Search vendor "Netwin" for product "Surgemail" and version "3.8m"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8o
Search vendor "Netwin" for product "Surgemail" and version "3.8o"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8q
Search vendor "Netwin" for product "Surgemail" and version "3.8q"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8s
Search vendor "Netwin" for product "Surgemail" and version "3.8s"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.8u
Search vendor "Netwin" for product "Surgemail" and version "3.8u"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.9a
Search vendor "Netwin" for product "Surgemail" and version "3.9a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.9c
Search vendor "Netwin" for product "Surgemail" and version "3.9c"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.9e
Search vendor "Netwin" for product "Surgemail" and version "3.9e"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.9g
Search vendor "Netwin" for product "Surgemail" and version "3.9g"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
3.9g2
Search vendor "Netwin" for product "Surgemail" and version "3.9g2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.0a
Search vendor "Netwin" for product "Surgemail" and version "4.0a"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.0k
Search vendor "Netwin" for product "Surgemail" and version "4.0k"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.0u3
Search vendor "Netwin" for product "Surgemail" and version "4.0u3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.0u4
Search vendor "Netwin" for product "Surgemail" and version "4.0u4"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.0v-8
Search vendor "Netwin" for product "Surgemail" and version "4.0v-8"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2a2-2
Search vendor "Netwin" for product "Surgemail" and version "4.2a2-2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2a2-3
Search vendor "Netwin" for product "Surgemail" and version "4.2a2-3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2a3-3
Search vendor "Netwin" for product "Surgemail" and version "4.2a3-3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2d-1
Search vendor "Netwin" for product "Surgemail" and version "4.2d-1"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2d2-2
Search vendor "Netwin" for product "Surgemail" and version "4.2d2-2"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
4.2d3-3
Search vendor "Netwin" for product "Surgemail" and version "4.2d3-3"
-
Affected
Netwin
Search vendor "Netwin"
Surgemail
Search vendor "Netwin" for product "Surgemail"
beta_3.9a
Search vendor "Netwin" for product "Surgemail" and version "beta_3.9a"
-
Affected