CVE-2002-2343

The exploit describes a script injection vulnerability in NOCC webmail where an attacker can include malicious script code in an email to steal a victim's session ID via XSS. The provided example demonstrates a simple alert-based payload to exfiltrate cookies.