247 matches found
CVE-2017-9517
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...
CVE-2017-9519
CVE-2017-9519 affects AtMail prior to 7.8.0.2. The issue is a CSRF vulnerability that lets an attacker create a user account. Affected product: AtMail webmail client. Root cause: cross-site request forgery enabling account creation. Impact: high (per CVSS3 vector: network, no privileges required,...
CVE-2017-9518
CVE-2017-9518 affects Atmail WebMail prior to version 7.8.0.2. The vulnerability is a CSRF flaw that enables an attacker to change the SMTP hostname and hijack all emails. The described remediation is to apply the minor update to 7.8.0.2 (per Atmail/NVD references). If applying in production, ver...
CVE-2017-9517: Cross-Site Request Forgery (CSRF)
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...
CVE-2017-9519: Cross-Site Request Forgery (CSRF)
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...
CVE-2017-9518: Cross-Site Request Forgery (CSRF)
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...
AtMail 1.04目录穿越漏洞
No description provided by source...
Atmail Webmail 7.5 - Multiple Vulnerabilities
Atmail is a commercial Linux messaging platform provider, the company develops webmail service known as Atmail Webmail. Latest version of Atmail, including desktop and mobile versions, suffers on multiple XSS and CSRF vulnerabilities, which may lead to account takeover. Attacker is able to inject...
Atmail Webmail Unsupported Version Detection
According to its self-reported version number, the version of Atmail Webmail on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL...
Atmail Webmail 7.x < 7.2.2 Multiple Vulnerabilities
According to its version, the Atmail Webmail installed on the remote host is 7.x prior to 7.2.2. It is, therefore, affected by the following vulnerabilities : - An unspecified input validation error exists that allows cross-site scripting attacks XSS. - An unspecified input validation error exist...
Atmail-Email-Server-6.4
By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will initiate the installation of a specially crafted plugin file via CSRF, enabling remote code execution on the Atmail server. import smtplib, urllib2, sys def sendMaildstemail...
Atmail Webmail 7.2 - Multiple Vulnerabilities
No description provided by source. Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber...
Atmail Webmail 7.2 - Multiple Vulnerabilities
Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber Request:...
Atmail WebAdmin and Webmail Control Panel SQL Root Password Disclosure
No description provided by source. Vuln Title: Atmail WebAdmin and webmail Control Panel Remote Access SQL Root password Vulnerability Author: FaryadR a.k.a Ciph3r tested on : Atmail Email Server 6.20.8 Twitter : https://twitter.com/faryadR Mail : [email protected] Website :...
atmail email server appliance 6.4 - Stored XSS - csrf - rce
No description provided by source. Exploit Title: Atmail Email Server Appliance 6.4 Remote Code Execution Date: Jul 21 2012 Author: muts Version: Atmail Email Server 6.4 By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will...
Atmail Webmail 3.x < 3.6.4 (3.64) Multiple Vulnerabilities
According to its version, the Atmail Webmail install on the remote host is 3.x prior to 3.6.4 3.64. It is, therefore, potentially affected by the following vulnerabilities : - An input validation error exists related to the script 'showmail.pl' and the 'Folder' parameter that could allow...
Atmail Webmail 4.x < 4.6.1 (4.61) 'Global.pm' XSS
According to its version, the Atmail Webmail install on the remote host is 4.x prior to 4.6.1 4.61. It is, therefore, potentially affected by an input-validate error in the file 'Global.pm' that could allow cross-site scripting XSS attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Atmail Webmail 6.6.x < 6.6.3 / 7.x < 7.0.3 File Name Parameter XSS
According to its version, the Atmail Webmail install on the remote host is version 6.6.x prior to 6.6.3 or 7.x prior to 7.0.3. It is, therefore, potentially affected by an input validation error related to the script '/index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId/' and the 'File...
Atmail Webmail < 6.6.2 Exim Buffer Overflow
According to its version, the Atmail Webmail install on the remote host is a version prior to 6.6.2. It is, therefore, potentially affected by an error in the included Exim component related to the 'dkimeximquerydnstxt' function and DNS record parsing that could allow a buffer overflow and possib...
Atmail Webmail 6.x / 7.x < 7.2.0 Multiple Vulnerabilities
According to its version, the Atmail Webmail install on the remote host is 6.x or 7.x prior to 7.2.0. It is, therefore, potentially affected by the following vulnerabilities : - An input validation error exists related to email handling that could allow persistent cross-site scripting attacks XSS...