Cross site scripting

Cross-site scripting XSS vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes...

AtMail Cross-Site Request Forgery Vulnerability

AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in AtMail versions prior to 7.8.0.2...

AtMail Cross-Site Request Forgery Vulnerability (CNVD-2017-09348)

AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in versions of AtMail prior to...

Cross site request forgery (csrf)

atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...

Cross site request forgery (csrf)

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9518

CVE-2017-9518 affects Atmail WebMail prior to version 7.8.0.2. The vulnerability is a CSRF flaw that enables an attacker to change the SMTP hostname and hijack all emails. The described remediation is to apply the minor update to 7.8.0.2 (per Atmail/NVD references). If applying in production, ver...

CVE-2017-9518

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9519

CVE-2017-9519 affects AtMail prior to 7.8.0.2. The issue is a CSRF vulnerability that lets an attacker create a user account. Affected product: AtMail webmail client. Root cause: cross-site request forgery enabling account creation. Impact: high (per CVSS3 vector: network, no privileges required,...