medium5.4Public exploit code
CVE-2020-18723
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alt-N MDaemon webmail 20.0.0 - 'file name' Stored Cross Site Scripting (XSS)2021-02-08 · webapps · windows
Impact
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Altn | Mdaemon Webmail | before 20.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kailashbohara.com.np/blog/2020/07/15/mdaemon-stored-xss
- http://packetstormsecurity.com/files/161332/Alt-N-MDaemon-Webmail-20.0.0-Cross-Site-Scripting.html
- https://www.altn.com/Support/SecurityUpdate/MD082520_MDaemon_EN/
- http://kailashbohara.com.np/blog/2020/07/15/mdaemon-stored-xss
- http://packetstormsecurity.com/files/161332/Alt-N-MDaemon-Webmail-20.0.0-Cross-Site-Scripting.html
- https://www.altn.com/Support/SecurityUpdate/MD082520_MDaemon_EN/