CVE-2006-0341

Rockliffe MailSite < 6.1.22 - Cross-Site Scripting via WCONSOLE.DLL Query String

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0341. PoCs published by OS2A BTO.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in MailSite due to improper input sanitization. It includes a proof-of-concept URL demonstrating the issue but lacks executable exploit code.

Description

Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.

Exploits (1)

exploitdb WRITEUP VERIFIED

by OS2A BTO · textwebappscgi

https://www.exploit-db.com/exploits/27115

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in MailSite due to improper input sanitization. It includes a proof-of-concept URL demonstrating the issue but lacks executable exploit code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: MailSite (version not specified)

No auth needed

Prerequisites: Access to a vulnerable MailSite instance

MITRE ATT&CK