CVE-2017-9519

atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...

CVE-2017-9519

atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...

CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

Cross site request forgery (csrf)

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9518

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9518

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

Cross site request forgery (csrf)

atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...

Cross site request forgery (csrf)

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9519

atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account...

CVE-2017-9517

The CVE-2017-9517 entry corresponds to a CSRF vulnerability in AtMail prior to version 7.8.0.2 that allows an attacker to upload and import users via CSV. Affected product: AtMail WebMail client/server stack. Root cause: unauthenticated cross-site request forgery enabling CSV-based user bulk oper...

CVE-2017-9519

CVE-2017-9519 affects AtMail prior to 7.8.0.2. The issue is a CSRF vulnerability that lets an attacker create a user account. Affected product: AtMail webmail client. Root cause: cross-site request forgery enabling account creation. Impact: high (per CVSS3 vector: network, no privileges required,...

CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9518

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9518

CVE-2017-9518 affects Atmail WebMail prior to version 7.8.0.2. The vulnerability is a CSRF flaw that enables an attacker to change the SMTP hostname and hijack all emails. The described remediation is to apply the minor update to 7.8.0.2 (per Atmail/NVD references). If applying in production, ver...

AtMail 1.04目录穿越漏洞

No description provided by source...

Atmail Webmail 7.5 - Multiple Vulnerabilities

Atmail is a commercial Linux messaging platform provider, the company develops webmail service known as Atmail Webmail. Latest version of Atmail, including desktop and mobile versions, suffers on multiple XSS and CSRF vulnerabilities, which may lead to account takeover. Attacker is able to inject...

Atmail Webmail Unsupported Version Detection

According to its self-reported version number, the version of Atmail Webmail on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL...

Atmail Webmail 7.x < 7.2.2 Multiple Vulnerabilities

According to its version, the Atmail Webmail installed on the remote host is 7.x prior to 7.2.2. It is, therefore, affected by the following vulnerabilities : - An unspecified input validation error exists that allows cross-site scripting attacks XSS. - An unspecified input validation error exist...

Atmail-Email-Server-6.4

By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will initiate the installation of a specially crafted plugin file via CSRF, enabling remote code execution on the Atmail server. import smtplib, urllib2, sys def sendMaildstemail...