Lucene search
+L

4 matches found

OSV
OSV
•added 2020/11/27 1:15 a.m.•18 views

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

6.1CVSS6.4AI score0.01081EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/27 12:53 a.m.•53 views

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

6AI score0.01081EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/11/27 12:00 a.m.•2 views

PT-2020-17094

Name of the Vulnerable Software and Affected Versions Coremail XT version 5.0 Description The issue allows for XSS via an uploaded personal signature. This is demonstrated by a .jpg.html filename in the signImgFile parameter. Recommendations For Coremail XT version 5.0, consider restricting the...

6.1CVSS0.01081EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/27 12:00 a.m.•6 views

CVE-2020-29133: Improper Neutralization of Input During Web Page Generation

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

6.1CVSS5.8AI score0.01081EPSS
SaveExploits0References2
Rows per page
Query Builder