Exploit TIPS MailPost 5.1.1 - 'APPEND' Cross-Site Scripting

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
24721
Проверка EDB
  1. Пройдено
Автор
PROCHECKUP
Тип уязвимости
WEBAPPS
Платформа
CGI
CVE
cve-2004-1100
Дата публикации
2004-11-03
TIPS MailPost 5.1.1 - 'APPEND' Cross-Site Scripting
Код:
source: https://www.securityfocus.com/bid/11596/info

MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and script code in a user's browser.

This vulnerability may allow for theft of cookie-based authentication credentials or other attacks.

MailPost 5.1.1sv is reported prone to this issue. It is possible that other versions are affected as well.

http://www.example.com/scripts/mailpost.exe?*debug*=''&append=<script>alert('Can%20Cross%20Site%20Script')</script>
 
Источник
www.exploit-db.com

Похожие темы