Description
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 4
- Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities EDB-24377 · webapps · Jul 17, 2004 · verified
- Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities EDB-24378 · webapps · Jul 17, 2004 · verified
- Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting EDB-24379 · webapps · Jul 17, 2004 · verified
- Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting EDB-24380 · webapps · Jul 17, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://packetstormsecurity.nl/0408-exploits/merak527.txt
- 10966 vdb-entry
- 1010969 vdb-entry
- 20040817 Vulnerabilities in Merak Webmail Server mailing-list
- 9040 vdb-entry
- 9041 vdb-entry
- 9037 vdb-entry
- 9042 vdb-entry
- 12269 third-party-advisory
- 9038 vdb-entry
- 9039 vdb-entry
- merak-xss(17024) vdb-entry