9 lines
No EOL
625 B
Text
Executable file
9 lines
No EOL
625 B
Text
Executable file
source: http://www.securityfocus.com/bid/11596/info
|
|
|
|
MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and script code in a user's browser.
|
|
|
|
This vulnerability may allow for theft of cookie-based authentication credentials or other attacks.
|
|
|
|
MailPost 5.1.1sv is reported prone to this issue. It is possible that other versions are affected as well.
|
|
|
|
http://www.example.com/scripts/mailpost.exe?*debug*=''&append=<script>alert('Can%20Cross%20Site%20Script')</script> |