| 제목 | Kerio Connect KerioConnect 10.0.6 Cross Site Scripting |
|---|
| 설명 | 1.Stored XSS . Exposed Address: Settings/Email/Signature/EditHtmlSource
2.When a file with a malicious JavaScript code in its name is uploaded to the system, it is displayed again on the page within the input field without being sanitized. This creates the potential for an XSS attack. |
|---|
| 원천 | ⚠️ https://github.com/0xs1ash/poc/blob/main/xss.md |
|---|
| 사용자 | slash0x99 (UID 77812) |
|---|
| 제출 | 2025. 03. 19. PM 01:29 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 03. 30. AM 09:48 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 302027 [GFI KerioConnect 10.0.6 Signature EditHtmlSource 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|