EUVD-2006-0618

Malware in sbrugna...

CVE-2006-0842

Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...

CVE-2006-0842

Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...

Directory traversal

Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. dot dot in the unique parameter...

CVE-2006-0611

CVE-2006-0611 targets @Mail 4.3 and earlier on Windows. The vulnerability is a directory traversal in compose.pl that lets remote attackers upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter. documents confirm affected software and the root cause (directory t...

CVE-2006-0611

Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. dot dot in the unique parameter...