Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expression property in conjunction with a CSS comment within the STYLE attribute of an IMG element, (2) the CSS expression property in conjunction with multiple CSS comments within the STYLE attribute of an arbitrary element, or (3) an innerHTML attribute within an XML document.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alt-N MDaemon Free 跨站脚本漏洞
Vulnerability Description
Alt-N MDaemon是美国Alt-N公司的一套集成了SMTP、POP3和IMAP4协议的邮件服务系统。该系统支持自动处理电子邮件、防范垃圾邮件和防御邮件病毒等。 Alt-N MDaemon Free中存在跨站脚本漏洞，该漏洞源于对用户提供的输入未经验证。攻击者利用该漏洞在受影响站点上下文中运行恶意的HTML或JavaScript代码，窃取基于cookie的认证证书并控制站点传达给用户的方式，也可能存在其他攻击。 Alt-N MDaemon Free 12.5.4版本中存在漏洞，其他版本也可能受到影响
CVSS Information
N/A
Vulnerability Type
N/A