TUCoPS :: HP Unsorted R

TUCoPS :: HP Unsorted R :: tb11004.htm
RM EasyMail Plus - Cross-Site Scripting Vulnerability #2

RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2 RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2


RM EasyMail Plus - Cross-Site Scripting Vulnerability #2

This cross-site scripting vulnerability can be exploited if a client views an email with a specially crafted title.

Vulnerable E-Mail Title: 
Vulnerable: RM EasyMail Plus
Google d0rk: intitle:"Powered by RM EasyMail Plus"

John Martinelli
john@martinelli.com 

RedLevel Security
RedLevel.org

May 19th, 2007