ID de Prueba:	1.3.6.1.4.1.25623.1.0.900405
Categoría:	Web application abuses
Título:	MDaemon Server < 10.0.2 WordClient Script Insertion Vulnerability
Resumen:	MDaemon is prone to a script insertion vulnerability.
Descripción:	Summary: MDaemon is prone to a script insertion vulnerability. Vulnerability Insight: This vulnerability is due to an input validation error in 'HTML tags' in emails which are not properly filtered before displaying. This can be exploited when the malicious email is viewed. Vulnerability Impact: An attacker can execute malicious arbitrary code in the email body. Affected Software/OS: MDaemon Server prior to version 10.0.2. Solution: Update to version 10.0.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6967 BugTraq ID: 32355 http://www.securityfocus.com/bid/32355 http://osvdb.org/50011 http://secunia.com/advisories/32142 http://www.vupen.com/english/advisories/2008/3206 XForce ISS Database: worldclient-html-xss(46688) https://exchange.xforce.ibmcloud.com/vulnerabilities/46688
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.