Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-9330

Description

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.

POC

Reference

- https://www.youtube.com/watch?v=LRK3c_DhXn4

Github

No PoCs found on GitHub currently.