EDB-40377
PoCOpen-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities
view exploit source exploit_dbtype webappsauthor Benjamin Daniel Musslerpublished 2016-09-13catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6854US | medium6.1 | Exploit | ||
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. M… | ||||
| CVE-2016-6853US | medium6.1 | Exploit | ||
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can be injected to the names of PGP public keys. When requesting… | ||||
| CVE-2016-6851US | medium6.1 | Exploit | ||
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web application. This allows cross-site sc… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan