source: https://www.securityfocus.com/bid/9777/info

It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI.

Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.

http://www.example.com/index.html/<script>alert('XSS')</script>