Atmail WebMail <= 5.6.1 (5.61) webadmin/admin.php Multiple Parameter XSS

medium Nessus Plugin ID 38650

Language:

Synopsis

The remote host is running a web application with multiple cross-site scripting vulnerabilities.

Description

The version of Atmail WebMail running on the remote host is vulnerable to multiple cross-site scripting issues. 'webadmin/admin.php' fails to sanitize input to the 'func' parameter, and to the 'type' parameter (when 'func' is set to 'stats'). This is known to affect version 5.6.1 (5.61) and may affect previous versions as well.

A remote attacker could exploit this by tricking a user into requesting a web page with arbitrary script code injected. This could lead to consequences such as stolen authentication credentials.

Solution

There is no known solution at this time.

Plugin Details

Severity: Medium

ID: 38650

File Name: atmail_webmail_5_61_admin_xss.nasl

Version: 1.15

Type: remote

Family: CGI abuses : XSS

Published: 4/30/2009

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.0

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: cpe:/a:atmail:atmail

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 7/14/2009

Reference Information

CVE: CVE-2009-2455

BID: 34762

CWE: 79

SECUNIA: 34403

Detections

Analytics