CVE:CVE-2005-2595
CNNVD:CNNVD-200508-162
Dada Mail 2.10 Alpha 1之前的版本存在跨站脚本(XSS)漏洞。这使得远程攻击者可以借助于归档信息执行任意Javascript。
solution:Upgrade dada_mail dada_mail to a higher version than 2.8.10,2.8.11,2.8.12,2.8.12_beta,2.8.13,2.8.13_alpha1,2.8.13_alpha2,2.8.14_alpha1,2.8.14_beta1,2.8.14_rc1,2.8.14_rc2,2.8.15,2.8.15_alpha1,2.8.15_beta1,2.8.15_rc1,2.8.16_alpha1,2.8.16_alpha2,2.8.16_alpha3,2.8.16_alpha4,2.9.0,2.9.0_beta1,2.9.0_beta2,2.9.0_rc1,2.9.1,2.9.2,and avoid the version 2.8.10,2.8.11,2.8.12,2.8.12_beta,2.8.13,2.8.13_alpha1,2.8.13_alpha2,2.8.14_alpha1,2.8.14_beta1,2.8.14_rc1,2.8.14_rc2,2.8.15,2.8.15_alpha1,2.8.15_beta1,2.8.15_rc1,2.8.16_alpha1,2.8.16_alpha2,2.8.16_alpha3,2.8.16_alpha4,2.9.0,2.9.0_beta1,2.9.0_beta2,2.9.0_rc1,2.9.1,2.9.2