Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or (2) the Subject field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KMMail远程代码插入漏洞
Vulnerability Description
KMMAIL是一款免费开放源代码的基于WEB的邮件程序，由PHP编写，可使用在多种Linux/Unix操作系统中。 KMMAIL对邮件中的数据缺少正确的过滤，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击。 KMMAIL对包含在邮件中的Javascript脚本代码缺少正确过滤，攻击者可以在主题字段中提交包含恶意Javascript脚本代码的数据并发送给目标用户，当用户使用浏览器打开包含Javascript脚本代码的邮件时，脚本代码就可能以IE进程的权限在系统上执行，导致用户用于验证的COOKIE等信息泄露
CVSS Information
N/A
Vulnerability Type
N/A