Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an (1) SMTP domain or a (2) user via a request to /FrontController; or conduct cross-site scripting (XSS) attacks via the (3) domainname parameter to /FrontController, when creating a new SMTP domain configuration; the (4) txtRecipient parameter to /FrontController, when creating a new forwarder; the (5) popFetchServer, (6) popFetchUser, or (7) popFetchRecipient parameter to /FrontController, when creating a new POP3 Fetcher account; or the (8) Smtp HELO domain in the Advanced Server Configuration.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synametrics Technologies Xeams 跨站请求伪造漏洞
Vulnerability Description
Synametrics Technologies Xeams是美国Synametrics Technologies公司的一款电子邮件和消息服务器，它支持SMTP、POP3和IMAP等协议，并提供垃圾邮件过滤功能。 Synametrics Technologies Xeams 4.5 Build 5755及之前版本中存在跨站请求伪造漏洞，该漏洞源于/FrontController URI没有充分过滤请求；创建新的域配置时，/FrontController URI没有充分过滤‘domainname’参数；创建
CVSS Information
N/A
Vulnerability Type
N/A