| शीर्षक | HSC Cybersecurity mailinspector 5.3.2-3 Cross Site Scripting |
|---|
| विवरण | A reflected Cross-Site Scripting (XSS) vulnerability was identified in the MAIL INSPECTOR system, version 5.3.2-3. The issue affects the error_description parameter, which is processed via an HTTP GET request and reflected into the page source without proper input sanitization or validation.
As a result, an unauthenticated attacker can inject arbitrary JavaScript code that will be executed within the context of the victim’s browser when a crafted URL is accessed. The vulnerability can be exploited without prior authentication, significantly increasing the attack surface and potential impact, which may include session hijacking, malicious redirection, or execution of unauthorized actions on behalf of the affected user. |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1KI2SIDcVm5U3Yzo5tNT5YOwREQWe_5BJaWe-ctRmLoI/edit?usp=sharing |
|---|
| उपयोगकर्ता | gabriel (UID 72007) |
|---|
| सबमिशन | 29/01/2026 03:03 AM (8 महीनों पहले) |
|---|
| संयम | 05/03/2026 07:06 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349219 [HSC Cybersecurity Mailinspector तक 5.3.2-3 URL mliUserValidation.php error_description क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|