CommuniGate Pro WebMail Crystal, pronto and pronto4 component cross-site scripting vulnerability

CommuniGate Pro is a comprehensive Mail Transfer Agent MTA developed by CommuniGate, Inc. that supports multiple platforms.WebMail Crystal, pronto and pronto4 are among the components used in it. A cross-site scripting vulnerability exists in the WebMail Crystal, pronto and pronto4 components of...

CVE-2017-16962: Improper Neutralization of Input During Web Page Generation

The WebMail components Crystal, pronto, and pronto4 in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via 1 the location or details field of a Google Calendar invitation, 2 a crafted Outlook.com calendar aka Hotmail Calendar invitation, 3 e-mail granting access to a directory that h...

PT-2017-14665

Name of the Vulnerable Software and Affected Versions CommuniGate Pro versions prior to 6.2.1 Description The issue concerns stored XSS vulnerabilities in the WebMail components of CommuniGate Pro, specifically in Crystal, pronto, and pronto4. These vulnerabilities can be exploited through variou...

CommuniGatePro 6.1.16 Cross Site Scripting Vulnerability

CommuniGatePro version 6.1.16 suffers from multiple stored cross site scripting vulnerabilities. Exploit Title: CommuniGatePro webmails Multiple Stored XSS Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link:...