247 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes...
CVE-2017-11617
Cross-site scripting XSS vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes...
CVE-2017-11617
CVE-2017-11617 describes a Cross-site Scripting (XSS) vulnerability in atmail prior to version 7.8.0.2. An attacker can inject arbitrary web script or HTML into the body of an email by manipulating an IMG element that contains both single and double quotes, enabling remote code execution in the c...
CVE-2017-11617: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes...
AtMail Cross-Site Request Forgery Vulnerability
AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in AtMail versions prior to 7.8.0.2...
AtMail Cross-Site Request Forgery Vulnerability (CNVD-2017-09349)
AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in Atmail versions prior to 7.8.0.2...
AtMail Cross-Site Request Forgery Vulnerability (CNVD-2017-09348)
AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in versions of AtMail prior to...
atmail Multiple Vulnerabilities
atmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atmail:atmail"; if description...
CVE-2017-9517
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...
CVE-2017-9519
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...
Cross site request forgery (csrf)
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...
CVE-2017-9519
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...
CVE-2017-9518
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...
CVE-2017-9517
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...
Cross site request forgery (csrf)
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...
Cross site request forgery (csrf)
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...
CVE-2017-9518
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...
CVE-2017-9519
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...
CVE-2017-9517
The CVE-2017-9517 entry corresponds to a CSRF vulnerability in AtMail prior to version 7.8.0.2 that allows an attacker to upload and import users via CSV. Affected product: AtMail WebMail client/server stack. Root cause: unauthenticated cross-site request forgery enabling CSV-based user bulk oper...