7 lines
No EOL
443 B
Text
7 lines
No EOL
443 B
Text
source: http://www.securityfocus.com/bid/9777/info
|
|
|
|
It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI.
|
|
|
|
Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.
|
|
|
|
http://www.example.com/index.html/<script>alert('XSS')</script> |