2019-09-30 12:10:20
mitre
PUBLISHED
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victims cleartext credentials to an attacker via a login/?reason=failure&NTLM= URI.