medium4.3Public exploit code
CVE-2007-2718
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CommuniGate Pro 5.1.8 - Web Mail HTML Injection2007-05-12 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | All versions |
| Stalker | Communigate Pro | through 5.1.8 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=117900749209206&w=2
- http://osvdb.org/36017
- http://secunia.com/advisories/25250
- http://www.communigate.com/CommuniGatePro/History51.html
- http://www.scanit.be/advisory-2007-05-12.html
- http://www.securityfocus.com/bid/23950
- http://www.securitytracker.com/id?1018048
- http://www.vupen.com/english/advisories/2007/1795
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34266
- http://marc.info/?l=full-disclosure&m=117900749209206&w=2
- http://osvdb.org/36017
- http://secunia.com/advisories/25250
- http://www.communigate.com/CommuniGatePro/History51.html
- http://www.scanit.be/advisory-2007-05-12.html
- http://www.securityfocus.com/bid/23950
- http://www.securitytracker.com/id?1018048
- http://www.vupen.com/english/advisories/2007/1795
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34266