CVE-2016-4897: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

PT-2017-8594

Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.690 Description The issue concerns multiple cross-site scripting XSS vulnerabilities found in specific components of the software, including 1 filter/save forward.cgi, 2 filter/save.cgi, and 3 /man/search.cgi...

Usermin cross-site scripting vulnerabilties

Overview Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Toshinobu Honjo of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC...