CVE-2020-25925

Mô tả

Tham khảo

• ashketchum.medium.com/cross-site-scripting-xss-in-webmail-calender-in-icewarp-webclient-cve-2020-25925-67e1cbc40bd9 · Exploit

Lỗ hổng khác của webclient

• CVE-2023-43319TRUNG BÌNH 6.1Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts o…
• CVE-2023-39598TRUNG BÌNH 6.1Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafte…
• CVE-2010-5340TRUNG BÌNH 6.1IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.
• CVE-2010-5339TRUNG BÌNH 6.1IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in …
• CVE-2010-5338TRUNG BÌNH 6.1IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent …