CVE-2019-9539
Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp
: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.
Productos afectados
Telos · Automated Message Handling System¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://www.kb.cert.org/vuls/id/873161/