CVE-2015-5379

Vulnerability (CVE-2015-5379) : AXIGEN Mail Server’s Ajax WebMail interface (actions.hsp) before version 9.0 is vulnerable to cross-site scripting via crafted HTML attachments viewed in the WebMail “View attachment” function. Root cause: attachments in the Ajax WebMail view execute script/HTML, e...

Axigen Messaging Axigen Mail Server Cross-Site Scripting Vulnerability

Axigen Messaging Axigen Mail Server is a small mail server that can be used in conjunction with services such as SMTP, IMAP and WebMail. Axigen Messaging Axigen Mail Server suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HT...

AXIGEN Mail Server Email Message Cross-site Scripting Vulnerability

Axigen Mail Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

axigen mail server 8.0.1 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link: http://www.axigen.com/mail-server/download-axigen-mail-server-801-for-windows.html...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Axigen Mail Server - Filename Directory Traversal

Axigen Mail Server - Filename Directory Traversal source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using...

Axigen Mail Server - 'Filename' Directory Traversal

source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to obtain...

Axigen Mail Server directory traversal vulnerability

Overview Axigen Mail Server contains a directory traversal vulnerability. Description CWE-22: Improper Limitation of a Pathname to a Restricted DirectoryAxigen Mail Server has a web based administration site which allows authorized administrators to perform certain actions via HTTP. The 'View Log...

Axigen Mail Server 8.0.1 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link:...

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link:...

Axigen Mail Server 8.0.1 Cross Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link: http://www.axigen.com/mail-server/download-axigen-mail-server-801-for-windows.html Timeline: 29 May 2012: Vulnerability...

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link: http://www.axigen.com/mail-server/download-axigen-mail-server-801-for-windows.html Timeline: 29 May 2012: Vulnerability...

CVE-2010-3460

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3459

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3459

CVE-2010-3459 is an XSS vulnerability in AXIGEN Mail Server’s Ajax WebMail interface, affecting versions before 7.4.2. Practical impact: remote attackers may inject arbitrary script/HTML via unspecified vectors. Remediation: upgrade to AXIGEN 7.4.2 or later. No exploitation details are provided i...