Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Usermin HTML Email脚本代码执行漏洞
Vulnerability Description
Webmin是澳大利亚软件开发者Jamie Cameron和Webmin社区共同开发的一套基于Web的用于类Unix操作系统中的系统管理工具。Usermin则设计用于操作用户级别的任务,允许Unix系统中用户简单的进行接收邮件,执行SSH和邮件转发配置。 Usermin不正确过滤HTML EMAIL消息数据,远程攻击者可以利用这个漏洞窃取目标用户敏感信息。 攻击者可以发送包含恶意脚本代码的HTML EMAIL消息,当目标用户打开浏览时,可导致脚本代码在用户浏览器上执行,这可导致获得基于Cookie的敏感信
CVSS Information
N/A
Vulnerability Type
N/A