CVE-2017-17752

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

CVE-2017-17752

CVE-2017-17752 affects Ability Mail Server 3.3.2 from Code-Crafters Software UK. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via the body of an email and results in JavaScript execution on the Read Mail screen (the /_readmail URI). Affected component is the mail v...

Ability Mail Server 3.3.2 Cross Site Scripting

Exploit Title: Ability Mail Server 3.3.2 Persistent Cross Site Scripting XSS CVE: CVE-2017-17752 Date: 19-12-2017 Software Link: http://download.codecrafters.com/ams3.exe Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.codecrafters.com...