CVE-2010-3201

The CVE-2010-3201 entry concerns NetWin Surgemail (SurgeMail) SurgeWeb Cross‑Site Scripting (XSS) via the username_ex parameter. The vulnerability is described as a remote XSS that allows an attacker to inject arbitrary script/HTML in the SurgeWeb login page, potentially stealing cookies or hijac...

NetWin Surgemail XSS vulnerability

Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer [email protected] Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input...