Medium severity4.8NVD Advisory· Published Sep 19, 2017· Updated May 13, 2026
CVE-2017-14597
CVE-2017-14597
Description
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.
Affected products
2- cpe:2.3:a:afterlogic:aurora:7.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:afterlogic:webmail:7.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.