Exploit Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting

[Exploiter]

EDB-ID

23776

Проверка EDB

1. Пройдено

Автор

RAFEL IVGI THE-INSIDER

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2004-0337

Дата публикации

2004-03-01

source: https://www.securityfocus.com/bid/9777/info

It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI.

Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.

http://www.example.com/index.html/<script>alert('XSS')</script>