網擎資訊 Mail2000 - Stored XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7938-d9c97-1.html
• https://medium.com/chouhsiang/%E8%AA%AA%E6%98%8E-mail2000-mailgates-%E4%B8%89%E9%A0%85-xss-%E7%9B%B8%E9%97%9C-cve-84799d68e659
• https://net.nthu.edu.tw/netsys/mailing:announcement:20230321_01
• https://zeroday.hitcon.org/vulnerability/ZD-2018-01766
• https://www.twcert.org.tw/newepaper/cp-151-7938-d9c97-3.html
• https://app.opencve.io/cve/?vendor=openfind
• https://www.twcert.org.tw/en/cp-139-7186-0c7a6-2.html
• https://www.openfind.com.tw/taiwan/resource.html

Related Vulnerabilities

• Hepta Platforms｜Heptabase - Stored Cross-Site Scripting
• PoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSS
• PoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS
• PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
• PoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
• PoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSS
• PoCCVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site Scripting
• PoCCVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting
• PoCCVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload
• PoCCVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting
• PoCCVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site Scripting
• PoCCVE-2022-1029: Limit Login Attempts - Stored Cross-Site Scripting
• PoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution