Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Commtouch反垃圾邮件企业网关PARAMS参数跨站脚本漏洞
Vulnerability Description
Commtouch Anti-Spam是由以色列Commtouch公司开发的企业级垃圾邮件防护平台。 Commtouch Anti-Spam产品向用户定期发送邮件报告，列出所阻断的可疑垃圾邮件，然后用户可以在邮件中点击相关链接确认是否应放行可疑邮件。点击链接后，用户会被定向到一个登录页面，而这个登录页面没有正确的过滤PARAMS参数。如果攻击者发送了包含有恶意链接的邮件消息的话，用户受骗点击了消息中的链接就会导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A