ID de Prueba:	1.3.6.1.4.1.25623.1.0.800097
Categoría:	Web application abuses
Título:	Merak Mail Server Web Mail < 9.4.0 IMG HTML Tag Script Insertion Vulnerability
Resumen:	Merak Mail Server is prone to a script injection; vulnerability.
Descripción:	Summary: Merak Mail Server is prone to a script injection vulnerability. Vulnerability Insight: Input passed via HTML tags in emails are not properly sanitised before being displayed in the users system. Vulnerability Impact: Successful exploitation could result in insertion of arbitrary HTML and script code via a specially crafted email in a user's browser session in the context of an affected site. Affected Software/OS: Merak Mail Server 9.3.2 and prior. Solution: Update to version 9.4.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5734 BugTraq ID: 32969 http://www.securityfocus.com/bid/32969 http://blog.vijatov.com/index.php?itemid=11 http://osvdb.org/50885 http://secunia.com/advisories/32770 XForce ISS Database: merak-img-xss(47533) https://exchange.xforce.ibmcloud.com/vulnerabilities/47533
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.