Lucene search
MitreCVELIST:CVE-2005-4558HistoryDec 28, 2005 - 11:00 a.m.
CVE-2005-4558
2005-12-2811:00:00
mitre
www.cve.org
5
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include arbitrary PHP code via a URL in a modified lang_settings parameter to mail/index.html.
References
marc.info/?l=full-disclosure&m=113570229524828&w=2
secunia.com/advisories/17046
secunia.com/advisories/17865
secunia.com/secunia_research/2005-62/advisory/
securitytracker.com/id?1015412
www.osvdb.org/22080
www.osvdb.org/22081
www.securityfocus.com/archive/1/420255/100/0/threaded
www.securityfocus.com/bid/16069
exchange.xforce.ibmcloud.com/vulnerabilities/23904
Related
cve
cve
CVE-2005-4558
2005-12-28 11:03:00
CVE-2006-0818
2006-07-21 14:03:00
exploitdb
exploitdb
nvd
nvd
CVE-2005-4558
2005-12-28 11:03:00
CVE-2006-0818
2006-07-21 14:03:00
cvelist
cvelist
CVE-2006-0818
2006-07-18 22:00:00
prion
prion
Directory traversal
2006-07-21 14:03:00
openvas
openvas
VisNetic / Merak Mail Server multiple flaws
2006-03-26 00:00:00
VisNetic / Merak Mail Server multiple flaws
2006-03-26 00:00:00
nessus
nessus
VisNetic / Merak Mail Server Multiple Remote Vulnerabilities
2005-12-28 00:00:00