CVE-2025-44148

CVE-2025-44148 - 反射型跨站脚本（Reflected XSS） MailEnable 中的反射型跨站脚本（XSS） 厂商：MailEnable Pty. Ltd. 受影响版本：10 描述 由于 failure.aspx 中对用户输入清理不当，MailEnable Webmail 存在反射型跨站脚本（XSS）漏洞。远程攻击者可通过构造的 URL 注入任意 JavaScript 代码，该代码随后在服务器响应中反射，并在用户浏览器会话上下文中执行。 POC 访问 /Mondo/lang/sys/Failure.aspx?state=19753 页面 使用...

MailEnable failure.aspx component cross-site scripting vulnerability

MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied da...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

MailEnable 安全漏洞

MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied da...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2025-44148: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...