Cross site scripting

A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/SMTP Status. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2020-36527

The CVE-2020-36527 entry relates to the Server Status project, describing a cross-site scripting vulnerability in the HTTP Status/SMTP Status component that can be exploited remotely. CNNVD-202206-750 provides a concrete detail: vulnerable in Server Status version 1.2.2, enabling a remote XSS att...

DEBIAN-CVE-2020-26970

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...