53 matches found
Ability Mail Server 2013 - Password Reset CSRF from Stored XSS (Web UI)
No description provided by source. On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a user named, victim, with a...
Code-Crafters Ability Mail Server 1.18 errormsg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10695/info Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks. The server is prone to a cross-site scripting...
Ability Mail Server 2013 - Password Reset CSRF from Stored XSS (Web UI)
Exploit for windows platform in category web applications On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a use...
Ability Mail Server 2013 -Persistent Cross-Site Scripting / Cross-Site Request Forgery (Password Reset)
On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a user named, victim, with a password of victim 5. Finish...
Cross site scripting
Cross-site scripting XSS vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...
CVE-2013-6162
Cross-site scripting XSS vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...
CVE-2013-6162
The CVE-2013-6162 entry affects Code-Crafters Ability Mail Server 3.1.1 (Ability Mail Server 2013). The connected sources detail a Stored XSS vulnerability: an attacker can inject arbitrary HTML/JavaScript via the body of an email, with PoCs showing stored XSS in e‑mail content and, in exploits, ...
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting
!/usr/bin/env python ''' Exploit Title: Ability Mail Server 2013 Stored XSS Date: 12/20/2013 Exploit Author: David Um Vendor Homepage: http://www.code-crafters.com/ Software Link: http://download.code-crafters.com/ams.exe Version: 3.1.1 Tested on: Windows Server 2003 SP2 CVE : CVE-2013-6162...
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting !/usr/bin/env python ''' Exploit Title: Ability Mail Server 2013 Stored XSS Date: 12/20/2013 Exploit Author: David Um Vendor Homepage: http://www.code-crafters.com/ Software Link: http://download.code-crafters.com/ams.exe...
Ability Mail Server 2013 (3.1.1) - Stored XSS Vulnerability
Exploit for windows platform in category remote exploits import smtplib emailaddr = 'email protected' email = 'From: %s\n' % emailaddr email += 'To: %s\n' % emailaddr email += 'Subject: XSS\n' email += 'Content-type: text/html\n\n' email += 'alert"XSS"' s = smtplib.SMTP'192.168.58.140', 25...
Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability
Ability Mail Server is prone to a denial of service DoS vulnerability because it fails to adequately handle IMAP requests. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2009-3445
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
Command injection
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
CVE-2009-3445
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
CVE-2009-3445
CVE-2009-3445 affects Code-Crafters Ability Mail Server before 2.70. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a malformed IMAP4 FETCH command. Multiple sources (NVD, Red Hat, OpenVAS/Nessus entries) corroborate the issue and the affected ver...
Ability Mail Server < 2.70 IMAP4 FETCH DoS
The remote host appears to be running Ability Mail Server. According to its banner, the IMAP service component of the installed version of Ability Mail Server fails to correctly parse FETCH commands. By sending a specially crafted FETCH command, an attacker may be able to exploit this vulnerabili...
Code-Crafters Ability Mail Server IMAP FETCH请求远程拒绝服务漏洞
Bugraq ID: 36519 Code-Crafters Ability Mail Server是一款Email服务程序。 Code-Crafters Ability Mail Server处理IMAP版本4 FETCH存在未明错误，远程攻击者可以利用漏洞使服务程序崩溃。 目前没有详细漏洞细节提供。 Code-Crafters Ability Mail Server 2.63 用户可联系供应商升级到Code-Crafters Ability Mail Server 2.70版本：...
Ability Mail Server < 2.70 Remote Denial of Service
Binary data 5184.prm...