IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0.
References
Link | Resource |
---|---|
https://vuldb.com/?id.142993 | Permissions Required Third Party Advisory |
https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602 | Third Party Advisory |
Configurations
Information
Published : 2019-10-11 04:15
Updated : 2019-10-15 12:13
NVD link : CVE-2010-5336
Mitre link : CVE-2010-5336
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
icewarp
- webclient