Alt-N MDaemon Webmail 20.0.0 Cross Site Scripting

Exploit Title: Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting XSS Date: 2020-08-25 Exploit Author: Kailash Bohara Vendor Homepage: https://www.altn.com/ Version: Mdaemon webmail 3. We can see execution code and after saving it, each time we visits the distribution list...

Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting (XSS)

Exploit Title: Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting XSS Date: 2020-08-25 Exploit Author: Kailash Bohara Vendor Homepage: https://www.altn.com/ Version: Mdaemon webmail 3. We can see execution code and after saving it, each time we visits the distribution list...

CVE-2020-18724

Authenticated stored cross-site scripting XSS in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list...

CVE-2020-18724

CVE-2020-18724 affects MDaemon Webmail 19.5.5, where an authenticated user can trigger a stored XSS in the contact name field of a distribution list; payloads are executed when opening the contact list. Public exploit details exist (PacketStorm) and a vendor security update (ALTN) is referenced f...

CVE-2017-18724

creationtimestamp| type| source ---|---|--- 2020-04-24 18:37:06+00:00| seen| https://t.me/cibsecurity/11617...

CVE-2017-18724

CVE-2017-18724 affects NETGEAR D6200 (before 1.1.00.24) and R6700v2/R6800/R6900v2 (before 1.1.0.42). The vulnerability is a stack-based buffer overflow exploitable by an unauthenticated attacker. Remediation is upgrading to D6200 1.1.00.24 or R6700v2/R6800/R6900v2 to 1.1.0.42 or later; the docume...

CVE-2019-18724

CVE-2019-18724 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-18724

...

CVE-2018-18724

CVE-2018-18724 affects YUNUCMS 1.1.5, with a cross-site scripting (XSS) flaw in index.php/admin/category/editcategory?id=73. Root cause and detailed impact are described as XSS; exploitation details are not provided in the documents. No remediation or patch information is included in the provided...