Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated attacker to send a message from any source email address. The attack uses an HTTP POST request to a /Session URI, and interchanges the XML From and To elements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Stalker CommuniGate Pro 安全漏洞
Vulnerability Description
Stalker CommuniGate Pro（CGP）是Stalker Software公司开发的一款综合性邮件传输代理(MTA)，支持多种平台。 Stalker CGP 6.2版本中的‘XML Interface to Messaging, Scheduling, and Signaling’(XIMSS)协议的实现存在安全漏洞，该漏洞源于程序没有检测XIMSS标签。攻击者可利用该漏洞从任意源的邮箱地址发送邮件。
CVSS Information
N/A
Vulnerability Type
N/A