| 标题 | Kerio Connect KerioConnect 10.0.6 Cross Site Scripting |
|---|
| 描述 | 1.Stored XSS . Exposed Address: Settings/Email/Signature/EditHtmlSource
2.When a file with a malicious JavaScript code in its name is uploaded to the system, it is displayed again on the page within the input field without being sanitized. This creates the potential for an XSS attack. |
|---|
| 来源 | ⚠️ https://github.com/0xs1ash/poc/blob/main/xss.md |
|---|
| 用户 | slash0x99 (UID 77812) |
|---|
| 提交 | 2025-03-19 13時29分 (2 年前) |
|---|
| 管理 | 2025-03-30 09時48分 (11 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 302027 [GFI KerioConnect 10.0.6 Signature EditHtmlSource 跨网站脚本] |
|---|
| 积分 | 17 |
|---|