Research on Vulnerability Detection Technology for WEB Mail System
Xin Wang, Runpu Wu, Jinxin Ma, Gang Long, Jedeng Han · Procedia Computer Science · 2018
Recently, the Email system is seriously threatened by the vulnerability attack, and XSS vulnerability is one of the most serious vulnerability of WEB mail system. In this paper, we proposed a crossing site script injection vulnerability detection method for WEB mail system, and developed a detection tool for a systematic. With the method we proposed, we can automatically construct attack vectors according to different attack surfaces, and generate malformed mails for vulnerability detection. By applying the tool to some popular Webmail systems, seven exploitable XSS vulnerabilities are found. The evaluation result shows that our tool can efficiently detect XSS vulnerabilities.