CVE-2017-6913

CVE-2017-6913 This is a vulnerability I found in open-xchange OX App Suite's webmail https://www.open-xchange.com/ a while back. Vulnerability details The webmail was vulnerable to a stored XSS when opening an email, due to the event attributes of the HTML time tag not being properly filtered...

CVE-2017-6913

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

Cross site scripting

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

CVE-2017-6913

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

PT-2018-8348

Name of the Vulnerable Software and Affected Versions Open-Xchange webmail versions prior to 7.6.3-rev28 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag. Recommendations For versions prior to...

CVE-2017-6913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

Exploit for Cross-site Scripting in Open-Xchange Open-Xchange_Appsuite

CVE-2017-6913 ============= This is a vulnerability I found in...