• info
• discussion
• exploit
• solution
• references

NeoMail NeoMail.PL SessionID Parameter Cross-Site Scripting Vulnerability

This issue can be exploited through a web client.

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/neomail-neomail.pl-sessionid-xss.txt