ID de Prueba:	1.3.6.1.4.1.25623.1.0.801576
Categoría:	Web application abuses
Título:	Hastymail2 < 1.01 XSS Vulnerability
Resumen:	Hastymail2 is prone to a cross-site scripting (XSS); vulnerability.
Descripción:	Summary: Hastymail2 is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by improper validation of crafted background attribute within a cell in a TABLE element which allows remote attackers to inject arbitrary web script or HTML. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Affected Software/OS: Hastymail2 prior to version 1.01. Solution: Update to version 1.01 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4646 BugTraq ID: 43681 http://www.securityfocus.com/bid/43681 http://openwall.com/lists/oss-security/2011/01/05/3 http://openwall.com/lists/oss-security/2011/01/06/14 XForce ISS Database: hastymail2-table-xss(64962) https://exchange.xforce.ibmcloud.com/vulnerabilities/64962
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.