| عنوان | Kerio Connect KerioConnect 10.0.6 Cross Site Scripting |
|---|
| الوصف | 1.Stored XSS . Exposed Address: Settings/Email/Signature/EditHtmlSource
2.When a file with a malicious JavaScript code in its name is uploaded to the system, it is displayed again on the page within the input field without being sanitized. This creates the potential for an XSS attack. |
|---|
| المصدر | ⚠️ https://github.com/0xs1ash/poc/blob/main/xss.md |
|---|
| المستخدم | slash0x99 (UID 77812) |
|---|
| ارسال | 19/03/2025 01:29 PM (2 سنوات منذ) |
|---|
| الاعتدال | 30/03/2025 09:48 AM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 302027 [GFI KerioConnect 10.0.6 Signature EditHtmlSource البرمجة عبر المواقع] |
|---|
| النقاط | 17 |
|---|