CVE-2025-44148 PoC — MailEnable 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44148.yaml

Associated Vulnerability

Title:MailEnable 安全漏洞 (CVE-2025-44148)
Description:MailEnable是澳大利亚MailEnable公司的一个基于 Windows 的商业电子邮件服务器。 MailEnable v10之前版本存在安全漏洞，该漏洞源于failure.aspx组件存在跨站脚本，可能导致任意代码执行。

Description

Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component.

File Snapshot


 id: CVE-2025-44148

info:
  name: MailEnable Mail Service < v10 - Cross-Site Scripting
  author: rit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!