SpamTitan Multiple HTML Injection...

- AV AC AU C I A
发布: 2011-12-21
修订: 2024-04-28

SpamTitan is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, or control how the site is rendered to the user. Other attacks are also possible. SpamTitan 5.08 is vulnerable; other versions may also be affected.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息