4 matches found
CVE-2020-29133
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...
CVE-2020-29133
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...
PT-2020-17094
Name of the Vulnerable Software and Affected Versions Coremail XT version 5.0 Description The issue allows for XSS via an uploaded personal signature. This is demonstrated by a .jpg.html filename in the signImgFile parameter. Recommendations For Coremail XT version 5.0, consider restricting the...
CVE-2020-29133: Improper Neutralization of Input During Web Page Generation
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...