CVE-2012-2593

Atmail XSS-CSRF-RCE 漏洞利用链 PoC atmail-rce.py：利用 Atmail 网页邮件界面中的 CVE-2012-2593 漏洞。 atmail-csrf.js：利用 CVE-2012-2593 实现 CSRF 攻击的 JavaScript 文件，用于安装恶意插件并执行反向 Shell。 Plugin.php：待安装的 Atmail 插件，用于调用反向 Shell。 !!仅用于已获得测试权限的服务器 概述 Atmail 邮件服务器 6.4 版本在邮件头的 Date 字段和邮件正文（通过 iFrame 注入）中存在 XSS 漏洞。利用此漏洞结合...

atmail email server appliance 6.4 - Stored XSS - csrf - rce

No description provided by source. Exploit Title: Atmail Email Server Appliance 6.4 Remote Code Execution Date: Jul 21 2012 Author: muts Version: Atmail Email Server 6.4 By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will...

Atmail Email Server WebAdmin Control Panel dbconfig.ini Information Disclosure

The remote web server hosts a version of Atmail Webmail that fails to properly restrict access to its database configuration file. A remote, unauthenticated attacker could obtain database connection information and then leverage this data to assist in further attacks. %NASLMINLEVEL 70300 C Tenabl...

Atmail Email Server Appliance 6.4 Stored XSS - CSRF - RCE

Exploit for linux platform in category remote exploits Exploit Title: Atmail Email Server Appliance 6.4 Remote Code Execution Date: Jul 21 2012 Author: muts Version: Atmail Email Server 6.4 By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScrip...

AtMail Email Server Appliance 6.4 - Persistent Cross-Site Scripting Cross-Site Request Forgery Remote Code Execution

AtMail Email Server Appliance 6.4 - Persistent Cross-Site Scripting Cross-Site Request Forgery Remote Code Execution Exploit Title: Atmail Email Server Appliance 6.4 Remote Code Execution Date: Jul 21 2012 Author: muts Version: Atmail Email Server 6.4 By sending an email to a user with the Atmail...