CVE-2007-2718

Stalker CommuniGate Pro <5.1.8 - XSS

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2718. PoCs published by Alla Bezroutchko.

AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in CommuniGate Pro by using a malformed STYLE tag to execute arbitrary JavaScript in the context of the affected site. The vulnerability is specific to Microsoft Internet Explorer and affects versions 5.1.8 and earlier.

Description

Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Alla Bezroutchko · textwebappsphp

https://www.exploit-db.com/exploits/30027

View Code ZIP pw:eip

This exploit demonstrates an HTML injection vulnerability in CommuniGate Pro by using a malformed STYLE tag to execute arbitrary JavaScript in the context of the affected site. The vulnerability is specific to Microsoft Internet Explorer and affects versions 5.1.8 and earlier.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: CommuniGate Pro 5.1.8 and earlier

No auth needed

Prerequisites: Victim must be using Microsoft Internet Explorer · Victim must view the malicious message

MITRE ATT&CK