CVE-2019-7219 PoC — Zarafa Webapp 跨站脚本漏洞

Source

https://github.com/verifysecurity/CVE-2019-7219

Associated Vulnerability

Title:Zarafa Webapp 跨站脚本漏洞 (CVE-2019-7219)
Description:Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.

Description

CVE-2019-7219

Readme

# CVE-2019-7219
CVE-2019-7219  Zarafa Webapp

Author: verifysecurity

At least Webapp version 1.6-46049 till 2.0.1.47791 are affected.

<code>hxxps://127.0.0.1/webapp/?fccc0"><script>alert(1)</script>5f43d=1</code>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!