Lucene search
MitreCVELIST:CVE-2022-31470HistoryJun 07, 2022 - 12:00 a.m.
CVE-2022-31470
2022-06-0700:00:00
mitre
www.cve.org
2
xss vulnerability
axigen mobile webmail
arbitrary javascript execution
mailbox content access
EPSS
0.001
Percentile
49.3%
An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
Related
cve
cve
CVE-2022-31470
2022-06-07 21:15:15
githubexploit
githubexploit
Exploit for Cross-site Scripting in Axigen Axigen Mobile Webmail
2023-09-13 05:59:02
nvd
nvd
CVE-2022-31470
2022-06-07 21:15:15
zdt
zdt
Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS Vulnerability
2023-09-11 00:00:00
prion
prion
Cross site scripting
2022-06-07 21:15:00
packetstorm
packetstorm
Axigen 10.5.0–4370c946 Cross Site Scripting
2023-09-08 00:00:00
exploitdb
exploitdb
Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
2023-09-08 00:00:00