Description
Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI.
References
- mailscan-admininterface-xss(44517) vdb-entry
- 4172 third-party-advisory
- 30700 vdb-entry
- 31534 third-party-advisory
- 20080815 Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface mailing-list
- http://www.oliverkarow.de/research/mailscan.txt