PT-2017-13234

Name of the Vulnerable Software and Affected Versions Securimage versions 3.6.4 and earlier Securimage versions prior to 3.6.6 Description The issue allows remote attackers to inject arbitrary HTML into an e-mail message body via the HTTP USER AGENT parameter to "example form.ajax.php" or "exampl...