Atmail SQL Injection Vulnerability

Atmail is an email hosting service from Atmail. It is used to ensure a secure, stable, scalable and private customer email platform. An SQL injection vulnerability exists in Atmail version v6.6.0, which stems from an SQL injection vulnerability in the login page...

Atmail <= 5.62 XSS Vulnerability

Atmail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atmail:atmail"; if...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

Design/Logic Flaw

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200

The CVE-2022-31200 issue affects Atmail 5.62 and is described as a cross-site scripting (XSS) vulnerability exploitable via the mail/parse.php file with crafted URL parameters (html/$this-&gt;Language/help/filexp.html&FirstLoad=1&HelpFile=file.html). Multiple connected sources corroborate a vulne...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

CVE-2022-31200: Improper Neutralization of Input During Web Page Generation

Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...

PT-2023-13028

Name of the Vulnerable Software and Affected Versions Atmail version 5.62 Description The issue allows for XSS via the "mail/parse.php" endpoint, specifically through the Search Terms field when accessing the URL with parameters such as...

Atmail cross-site scripting vulnerabilities

Atmail is an email hosting service from Atmail. It is used to ensure that customer email platforms are secure, stable, scalable and private. A security vulnerability exists in Atmail version 5.62, which stems from the presence of a cross-site scripting XSS vulnerability...

Atmail <= 6.5.0 XSS Vulnerability

Atmail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atmail:atmail"; if...

Atmail Cross-Site Scripting Vulnerability (CNVD-2022-66695)

Atmail is an email hosting service from Atmail. Atmail version 6.5.0 contains a cross-site scripting vulnerability that originates from an incorrect parameter in index.php/admin/index/ and can be exploited to execute JavaScript code...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

Cross site scripting

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2022-30776

Affected software: Atmail 6.5.0. Vulnerability: Cross-site scripting (XSS) via the index.php/admin/index/ 'error' parameter. Root cause: Improper handling/input validation of the error parameter leads to script execution in the victim’s browser. Impact (as described): attackers could execute mali...