| Package | Affected versions | Patched versions |
|---|---|---|
| webmail | ≤ 2.2.6 |
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free