AfterLogic WebMail settings.xml 信息泄露

No description provided by source...

AfterLogic WebMail Lite Authentication Bypass

AfterLogic WebMail Lite is a free web-based IMAP and SMTP email-client with Ajax interface. AfterLogic WebMail Lite is available for both PHP and ASP.NET platforms. The version of AfterLogic WebMail Lite that is written in PHP is free and open-source software subject to the terms of the Affero...

After Logic Mail - Remote Admin Takeover (All versions)

AfterLogic WebMail Lite is a free web-based IMAP and SMTP email-client with Ajax interface. AfterLogic WebMail Lite is available for both PHP and ASP.NET platforms. The version of AfterLogic WebMail Lite that is written in PHP is free and open-source software subject to the terms of the Affero...

AfterLogic MailBee WebMail Pro 3.x login.php mode Parameter XSS

No description provided by source...

AfterLogic WebMail Pro 4.7.10 Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...

AfterLogic Pro and Lite 7.1.1.1存储型跨站脚本漏洞

No description provided by source. ?php / Exploit Title : AfterLogic Pro and Lite = 7.1.1.1 Stored XSS Google Dork : intext:"AfterLogic" intext:"Login Information" inurl:index.php Date : 19 Jan 2014 Exploit Author : Saeed reza Zamanian s.zamanian AT imenantivirus.com Vendor Homepage:...

AfterLogic Pro and Lite <= 7.1.1.1 Stored XSS Vulnerability

XSS codes can be stored in E-Mail Body. So you can send an email to the Victim with below payload and steal the victim's cookie. Usage Info Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer directory:...

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explor...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

CVE-2009-4743 affects AfterLogic WebMail Pro versions up to 4.7.10, via XSS in history-storage.aspx. The vulnerability is triggered by specially crafted HistoryStorageObjectName and HistoryKey parameters, allowing remote attackers to inject arbitrary web script/HTML and execute in the victim’s br...

CVE-2009-4743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

AfterLogic WebMail Pro Multiple Cross Site Scripting Vulnerabilities

AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-...

AfterLogic WebMail Pro Detection

This host is running AfterLogic WebMail Pro, a Webmail front-end for your existing POP3/IMAP mail server. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

AfterLogic WebMail Pro <= 4.7.10 Multiple XSS Vulnerabilities

AfterLogic WebMail Pro is prone to multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

AfterLogic WebMail Pro 4.7.10 Cross Site Scripting

Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...