CVE-2006-0842

CVE-2006-0842 describes a Cross-site Scripting (XSS) vulnerability in Calacode @Mail 4.3. This flaw allows remote attackers to inject arbitrary web script or HTML into a user's browser by crafting a malicious "javascript:" string within the SRC attribute of an IMG element in an email message. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity and a potential impact of partial integrity loss. The exploit intelligence shows no readily available Metasploit modules, Nuclei templates, or ExploitDB entries. Furthermore, the CVE has received minimal community attention, with zero mentions in social media discussions and no media coverage. This suggests a low level of public awareness and limited active exploitation. Despite its age and lack of current attention, the underlying CWE-79 (Improper Neutralization of Input During Web Page Generation) remains a common vulnerability class. While not currently listed on the KEV catalog or Hot List, organizations using Calacode @Mail 4.3 should be aware of this potential risk.