SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal

To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

CVE-2010-3486

creationtimestamp| type| source ---|---|--- 2010-09-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15048 2010-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15189 2011-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16955...