漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Openfind Mail2000 - XSS (Reflected Cross-site scripting)
Vulnerability Description
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Openfind Mail2000 跨站脚本漏洞
Vulnerability Description
Openfind Mail2000是一套基于Web的电子邮件系统。 Openfind Mail2000 V7及之前版本存在跨站脚本漏洞，该漏洞源于对邮件内容的特殊字符过滤不够，远程攻击者可以使用包含JavaScript的恶意网页触发反射型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A