PT-2011-1389

Name of the Vulnerable Software and Affected Versions NetWin Surgemail versions prior to 4.3g Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the username ex parameter to the surgeweb program. This enables attackers to execute...