CVE-2018-18635

www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows XSS via the admin/login/user/message/ PATHINFO...

CVE-2018-18635: Improper Neutralization of Input During Web Page Generation

www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows XSS via the admin/login/user/message/ PATHINFO...

PT-2018-14548

Name of the Vulnerable Software and Affected Versions MailCleaner CE versions 2018.08 through 2018.09 Description The issue concerns the administration login interface, where an XSS attack can be performed via the admin/login/user/message/ PATH INFO. Recommendations For MailCleaner CE versions...