Summary
This host is running Aker Secure Mail Gateway and is prone to cross-site scripting vulnerability.
Impact
Successful exploitation will allow attackers to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Impact Level: Application
Solution
Apply the patch from below link,
http://www.aker.com.br/produtos/aker-secure-mail-gateway
Insight
Input passed via the 'msg_id' GET parameter to webgui/cf/index.php is not properly sanitised before being returned to the user.
Affected
Aker Secure Mail Gateway version 2.5.2 and prior
Detection
Send a crafted data via HTTP GET request and check whether it is able to read cookie or not.
References
Severity
Classification
-
CVE CVE-2013-6037 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities