ID de Prueba:	1.3.6.1.4.1.25623.1.0.800675
Categoría:	Web application abuses
Título:	Kerio MailServer WebMail 'Integration' Page XSS Vulnerability
Resumen:	Kerio MailServer is prone to a cross-site scripting (XSS) vulnerability.
Descripción:	Summary: Kerio MailServer is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Issue is due to certain unspecified input passed to the integration page of the WebMail component which is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation could result in insertion of arbitrary HTML and script code in the user's browser session in the context of an affected site. Affected Software/OS: Kerio MailServer version 6.6.0 before 6.6.2 Patch 3 and 6.7.0 before 6.7.0 Patch 1. Solution: Upgrade to Kerio MailServer 6.6.2 Patch 3 or 6.7.0 Patch 1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2636 BugTraq ID: 35264 http://www.securityfocus.com/bid/35264 http://osvdb.org/54928 http://www.securitytracker.com/id?1022348 http://secunia.com/advisories/35392
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.