CVE-2020-11734

cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...

CVE-2020-11734

cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...

PT-2020-12814

Name of the Vulnerable Software and Affected Versions CyberSolutions CyberMail versions 5.0 and later Description The issue allows for cross-site scripting XSS via the ACTION parameter in the /cgi-bin/go endpoint. This could potentially lead to malicious script execution on the client-side...

CVE-2020-11734: Improper Neutralization of Input During Web Page Generation

cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...

PT-2019-13969

Name of the Vulnerable Software and Affected Versions MAIL2000 versions 6.0 and 7.0 Description The issue allows for the execution of arbitrary code via the ACTION parameter in the "/cgi-bin/go" page without requiring authentication. This can be executed for any user accessing the page. It is...

Openfind Mail2000 /cgi-bin/go page cross-site scripting vulnerability

Openfind Mail2000 is a Web-based e-mail system. A cross-site scripting vulnerability exists in the /cgi-bin/go page in Openfind MAIL2000 versions 6.0 and earlier and 7.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker c...