EUVD-2018-20924

Malware in sbrugna...

CVE-2018-9330

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...

Cross site scripting

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...

CVE-2018-9330

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...

CVE-2018-9330

The provided sources confirm a stored XSS vulnerability in Coremail XT3.0 (register.jsp), specifically via the third form field in a URI under register/. The OpenVAS entry refers to Coremail XT <= 3.0 Stored XSS Vulnerability, implying impact on older XT3.0 deployments. The NVD/NVD-derived ent...

CVE-2018-9330: Improper Neutralization of Input During Web Page Generation

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...

PT-2018-18987

Name of the Vulnerable Software and Affected Versions Coremail XT3.0 Description The issue concerns a stored XSS in the register.jsp file of Coremail XT3.0. This is demonstrated by the third form field to a URI under register/. Recommendations For Coremail XT3.0, update the register.jsp file to...