[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2
- From: john@xxxxxxxxxxxxxx
- Date: 20 May 2007 01:22:52 -0000
RM EasyMail Plus - Cross-Site Scripting Vulnerability #2
This cross-site scripting vulnerability can be exploited if a client views an
email with a specially crafted title.
Vulnerable E-Mail Title: </title><script>alert(1)</script>
Vulnerable: RM EasyMail Plus
Google d0rk: intitle:"Powered by RM EasyMail Plus"
John Martinelli
john@xxxxxxxxxxxxxx
RedLevel Security
RedLevel.org
May 19th, 2007