Test ID:	1.3.6.1.4.1.25623.1.0.901196
Category:	Web application abuses
Title:	SmarterMail Multiple Vulnerabilities
Summary:	SmarterMail is prone to multiple vulnerabilities.
Description:	Summary: SmarterMail is prone to multiple vulnerabilities. Vulnerability Insight: Input passed in the 'path' parameter to Main/frmStoredFiles.aspx, the 'edit' parameter to UserControls/Popups/frmAddFileStorageFolder.aspx, the 'SubjectBox_SettingText' parameter to Main/Calendar/frmEvent.aspx, the 'url' parameter to UserControls/Popups/frmHelp.aspx, the 'folder' parameter to UserControls/Popups/frmDeleteConfirm.aspx, the 'editfolder' parameter to UserControls/Popups/frmEventGroup.aspx, the 'deletefolder' parameter to UserControls/Popups/frmEventGroup.aspx, and the 'bygroup' parameter to Main/Alerts/frmAlerts.aspx is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation could allow attackers to conduct cross site scripting, shell upload and directory traversal attacks. Affected Software/OS: SmarterTools SmarterMail versions 7.4 and prior. Solution: Upgrade to SmarterTools SmarterMail 8.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.