thundermail.assesta.com Cross Site Scripting vulnerability OBB-3554870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thundermail.stepi.re.kr XSS vulnerability

Vulnerable URL: http://thundermail.stepi.re.kr:9000/tm/pages/response/reject.jsp?message=rejectSuccess=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:23 GMT Vulnerability type:| XSS Vulnerabilit...