| Название | Kerio Connect KerioConnect 10.0.6 Cross Site Scripting |
|---|
| Описание | 1.Stored XSS . Exposed Address: Settings/Email/Signature/EditHtmlSource
2.When a file with a malicious JavaScript code in its name is uploaded to the system, it is displayed again on the page within the input field without being sanitized. This creates the potential for an XSS attack. |
|---|
| Источник | ⚠️ https://github.com/0xs1ash/poc/blob/main/xss.md |
|---|
| Пользователь | slash0x99 (UID 77812) |
|---|
| Представление | 19.03.2025 13:29 (2 лет назад) |
|---|
| Модерация | 30.03.2025 09:48 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 302027 [GFI KerioConnect 10.0.6 Signature EditHtmlSource межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|