ID de Prueba:	1.3.6.1.4.1.25623.1.0.800675
Categoría:	Web application abuses
Título:	Kerio MailServer WebMail 'Integration' Page XSS Vulnerability
Resumen:	The host is running Kerio MailServer and is prone to Cross-Site; Scripting vulnerability
Descripción:	Summary: The host is running Kerio MailServer and is prone to Cross-Site Scripting vulnerability Vulnerability Insight: Issue is due to certain unspecified input passed to the integration page of the WebMail component which is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation could result in insertion of arbitrary HTML and script code in the user's browser session in the context of an affected site. Affected Software/OS: Kerio MailServer version 6.6.0 before 6.6.2 Patch 3 and 6.7.0 before 6.7.0 Patch 1. Solution: Upgrade to Kerio MailServer 6.6.2 Patch 3 or 6.7.0 Patch 1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	BugTraq ID: 35264 Common Vulnerability Exposure (CVE) ID: CVE-2009-2636 http://www.securityfocus.com/bid/35264 http://osvdb.org/54928 http://www.securitytracker.com/id?1022348 http://secunia.com/advisories/35392
Copyright	Copyright (C) Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.