ID de Prueba:	1.3.6.1.4.1.25623.1.0.12262
Categoría:	Web application abuses
Título:	Open WebMail Content-Type XSS
Resumen:	The target is running at least one instance of Open WebMail whose; version is 2.32 or earlier. Such versions are vulnerable to a cross; site scripting attack whereby an attacker can cause a victim to; unknowingly run arbitrary Javascript code by reading a MIME message; with a specially crafted Content-Type or Content-Description header.
Descripción:	Summary: The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted Content-Type or Content-Description header. Solution: Upgrade to Open WebMail version 2.32 20040603 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2004 George A. Theall

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.