Outblaze Webmail HTML注入漏洞

Outblaze Email存在跨站脚本攻击（XSS）漏洞。远程攻击者可以通过IMG标记属性的Javascript注入任意web脚本或HTML。

The vendor has released a fix to correct this issue. Please contact the vendor for details.

来源: SECUNIA
名称: 12084
链接:http://secunia.com/advisories/12084

来源: XF
名称: outblaze-email-xss(16788)
链接:http://xforce.iss.net/xforce/xfdb/16788

来源: www.swp-zone.org
链接:http://www.swp-zone.org/archivos/advisory-09.txt

来源: BID
名称: 10756
链接:http://www.securityfocus.com/bid/10756

来源: www.securiteam.com
链接:http://www.securiteam.com/securitynews/5CP0O20DFI.html

来源: OSVDB
名称: 8104
链接:http://www.osvdb.org/8104

来源: SECTRACK
名称: 1010735
链接:http://securitytracker.com/alerts/2004/Jul/1010735.html

来源: FULLDISC
名称: 20040718 Cross-Site Scripting email Outblaze
链接:http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html