CVE-2006-6964

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.74:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.75:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.76:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:1.77:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-01-29 16:28

Updated : 2023-12-10 10:40


NVD link : CVE-2006-6964

Mitre link : CVE-2006-6964

CVE.ORG link : CVE-2006-6964


JSON object : View

Products Affected

mailenable

  • mailenable_professional