Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rudi Benkovic JAWMail脚本注入漏洞
Vulnerability Description
JAWmail 1.0-rc1存在跨站脚本(XSS)漏洞。远程攻击者借助(1)读取邮件功能中附加的文件名称,(2)pop-up窗口陈列出来的text/html邮件,和(3)如onMouseOver带有安全标签的某些恶意属性插入任意脚本或者HTML。
CVSS Information
N/A
Vulnerability Type
N/A