Lucene search
+L

4 matches found

NVD
NVD
added 2018/10/24 10:29 p.m.13 views

CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

6.1CVSS6AI score0.01402EPSS
SaveExploits1References2
Prion
Prion
added 2018/10/24 10:29 p.m.15 views

Design/Logic Flaw

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

4.3CVSS5.9AI score0.01402EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2018/10/24 10:00 p.m.60 views

CVE-2018-18621

CVE-2018-18621 affects CommuniGate Pro 6.2 via a stored XSS in Pronto! Mail Composer. The vulnerability occurs when the raw email link (in .txt format) is modified and renamed with a .html or .wssp extension, and the malformed message body is mishandled by /MIME/INBOX-MM-1/. Documented impact is ...

6.1CVSS5.9AI score0.01402EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/10/24 10:00 p.m.18 views

CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

6AI score0.01402EPSS
SaveExploits1References2
Rows per page
Query Builder