Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting

Author: Rafel Ivgi The-Insider
type: remote
platform: windows
port: 
date_added: 2004-03-01  
date_updated: 2012-12-31  
verified: 1  
codes: CVE-2004-0337  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 23776.txt  

source: https://www.securityfocus.com/bid/9777/info

It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI.

Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.

http://www.example.com/index.html/<script>alert('XSS')</script>