Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribute of (1) an IFRAME element or (2) a SCRIPT element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AfterLogic Mailsuite Pro ‘Body’字段跨站脚本漏洞
Vulnerability Description
AfterLogic Mailsuite Pro是针对Linux的消息传送解决方案，包括电子邮件服务器、基于AJAX的Web邮件客户端、垃圾邮件和病毒保护、基于Web的管理面板、日历、联系人等。 AfterLogic Mailsuite Pro中的Body字段中存在跨站脚本漏洞，该漏洞源于对用户提供的输入未经验证。攻击者可利用该漏洞在受影响站点上下文中运行恶意的HTML或JavaScript代码，窃取基于cookie的认证证书并控制站点传达给用户的方式，也可能存在其他攻击。Mailsuite Pro 6.
CVSS Information
N/A
Vulnerability Type
N/A