Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting

Author: Rafel Ivgi The-Insider
type: remote
platform: windows
port: 
date_added: 2004-03-01 
date_updated: 2012-12-31 
verified: 1 
codes: CVE-2004-0337 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9777/info

It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI.

Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.

http://www.example.com/index.html/<script>alert('XSS')</script>