Openfind Mail2000 - XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-7186-0c7a6-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-22902
• https://vuldb.com/vuln/230559
• https://www.twcert.org.tw/en/cp-139-7939-3423f-2.html
• https://github.com/advisories/GHSA-j58m-53vx-hhw8
• https://www.cvedetails.com/cve/CVE-2019-9763/
• https://www.twcert.org.tw/en/cp-139-7941-b66e7-2.html
• https://medium.com/chouhsiang/%E8%AA%AA%E6%98%8E-mail2000-mailgates-%E4%B8%89%E9%A0%85-xss-%E7%9B%B8%E9%97%9C-cve-84799d68e659
• https://avd.aliyun.com/detail?id=AVD-2023-28705
• https://nvd.nist.gov/vuln/detail/CVE-2023-28705

Related Vulnerabilities

• 網擎資訊 Mail2000 - HttpOnly flag bypass
• 網擎資訊 Mail2000 - Stored XSS
• 網擎資訊 Mail2000 - OS Command Injection
• Openfind Mail2000 - XSS (Reflected Cross-site scripting)