Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)

No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...

Axigen <= 2.0.0b1 Remote Denial of Service Exploit

No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

CVE-2012-2592: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

PT-2014-2254

Name of the Vulnerable Software and Affected Versions Axigen Mail Server version 8.0.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the body of an email. This could potentially lead to the execution of malicious scripts on the...

Axigen Arbitrary File Read and Delete (CVE-2012-4940)

A directory traversal vulnerability has been reported in AXIGEN Mail Server. The issue is due to the index.hsp script not properly sanitizing user input...

Directory traversal

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

The Axigen Free Mail Server is vulnerable to multiple directory traversal flaws within the View Log Files component. The root cause is the failure of the index.hsp script to properly sanitize user input, specifically the fileName parameter. Remote attackers can use .. sequences to read or delete ...

Axigen Arbitrary File Read and Delete

This module exploits a directory traversal vulnerability in the WebAdmin interface of Axigen, which allows an authenticated user to read and delete arbitrary files with SYSTEM privileges. The vulnerability is known to work on Windows platforms. This module has been tested successfully on Axigen...

Axigen Mail Server - Filename Directory Traversal

Axigen Mail Server - Filename Directory Traversal source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using...

CVE-2012-4940: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

PT-2012-5674

Name of the Vulnerable Software and Affected Versions Axigen Free Mail Server affected versions not specified Description The issue concerns multiple directory traversal vulnerabilities in the View Log Files component. These vulnerabilities allow remote attackers to read or delete arbitrary files...

Axigen Mail Server directory traversal vulnerability

Overview Axigen Mail Server contains a directory traversal vulnerability. Description CWE-22: Improper Limitation of a Pathname to a Restricted DirectoryAxigen Mail Server has a web based administration site which allows authorized administrators to perform certain actions via HTTP. The 'View Log...

Axigen Mail Server - 'Filename' Directory Traversal

source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to obtain...

Axigen Mail Server 8.0.1 Cross Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link: http://www.axigen.com/mail-server/download-axigen-mail-server-801-for-windows.html Timeline: 29 May 2012: Vulnerability...