Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IceWarp WebClient 跨站脚本漏洞
Vulnerability Description
Icewarp IceWarp WebClient是捷克爱思华宝(Icewarp)公司的一款基于web的邮件服务客户端。 IceWarp WebClient 10.3.5 版本存在跨站脚本漏洞,该漏洞源于登录页面中存在跨站脚本 (XSS),允许攻击者通过name参数注入的特制有效载荷执行任意 Web 脚本或 HTML。
CVSS Information
N/A
Vulnerability Type
N/A