← Database

CVE-2010-3201

MEDIUM CVSS: 4.3 Published: 2011-01-07 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.

Affected Platforms

Netwin Surgemail

Weakness Type

CWE-79

References