Secunia

Dr_insane has reported some vulnerabilities in Emumail Webmail, allowing malicious people to conduct Cross Site Scripting attacks and see the installation path.

1) User input passed to certain parameters isn't properly filtered before it is returned. This can be exploited to execute arbitrary HTML and script code in a user's current browser session in context of an affected site.

2) The "init.emu" file is accessible from remote and contains the installation path. This is not in itself a vulnerability but may be useful information for a malicious people launching an attack.

Version 5.2.7 is reportedly vulnerable. Other versions may also be affected.

Solution
Use a proxy or firewall with URL filtering capabilities to filter malicious requests.

Provided and/or discovered by
Dr_insane

Original Advisory
http://members.lycos.co.uk/r34ct/main/emu/emu.txt

Deep Links
Links available in Customer Area