CVE-2008-5760

MEDIUM 4.3CVE-2008-5760 · Published 30/12/2008 · updated 16/06/2026

In short

CVE-2008-5760 is a MEDIUM (CVSS 4.3) vulnerability affecting kerio mailserver (kerio).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kerio mailserver kerio	`= 5.0= 5.1= 5.1.1= 5.6.3= 5.6.4= 5.6.5= 5.7.0= 5.7.1= 5.7.10= 5.7.2= 5.7.3= 5.7.4= 5.7.5= 5.7.6= 5.7.7= 5.7.8= 5.7.9= 6.0= 6.0.0= 6.0.1= 6.0.10= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1.1= 6.1.2= 6.1.3= 6.1.3_patch_1= 6.1.4= 6.2.0= 6.2.1= 6.2.2= 6.3.0= 6.3.1= 6.3.1_p1= 6.3.1_p2= 6.4.0= 6.4.1= 6.4.2= 6.5.0= 6.5.1= 6.5.2= 6.6.0≤ 6.6.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/32955 · Vendor Advisory
kerio.com/kms_history.html
kerio.com/security_advisory.html · Vendor Advisory
securityfocus.com/bid/32863 · Patch
vupen.com/english/advisories/2008/3442
exchange.xforce.ibmcloud.com/vulnerabilities/47398

More vulnerabilities in kerio mailserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kerio mailserver

kerio

= 5.0= 5.1= 5.1.1= 5.6.3= 5.6.4= 5.6.5= 5.7.0= 5.7.1= 5.7.10= 5.7.2= 5.7.3= 5.7.4= 5.7.5= 5.7.6= 5.7.7= 5.7.8= 5.7.9= 6.0= 6.0.0= 6.0.1= 6.0.10= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1.1= 6.1.2= 6.1.3= 6.1.3_patch_1= 6.1.4= 6.2.0= 6.2.1= 6.2.2= 6.3.0= 6.3.1= 6.3.1_p1= 6.3.1_p2= 6.4.0= 6.4.1= 6.4.2= 6.5.0= 6.5.1= 6.5.2= 6.6.0≤ 6.6.1

No fix yet

More vulnerabilities in kerio mailserver

See all →