SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection
Author: Juan Pablo Lopez Yacubian
type: webapps
platform: php
port:
date_added: 2008-02-19
date_updated: 2014-01-28
verified: 1
codes: CVE-2008-0872;OSVDB-41857
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/27878/info
SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
SmarterMail Enterprise 4.3 is vulnerable; other versions may also be affected.
<XSS STYLE="xss:expression(alert('1'))"><XSS
STYLE="xss:expression(alert('2'))">