221 matches found
Directory traversal
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...
CVE-2010-3459
Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3459
CVE-2010-3459 is an XSS vulnerability in AXIGEN Mail Server’s Ajax WebMail interface, affecting versions before 7.4.2. Practical impact: remote attackers may inject arbitrary script/HTML via unspecified vectors. Remediation: upgrade to AXIGEN 7.4.2 or later. No exploitation details are provided i...
CVE-2010-3460
AXIGEN Mail Server 7.4.1 for Windows is affected by a directory traversal vulnerability in its HTTP interface, allowing remote attackers to read arbitrary files via a URL containing an encoded backslash (%5C). The issue is documented in CVE-2010-3460 with an NVD CVSSv2 base score of 5.0 (AV:N/AC:...
CVE-2010-3460
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...
Directory Traversal in Axigen v7.4.1 running on Windows
We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a very serious web vulnerability discovered by Acunetix WVS in Axigen. "Axigen is an integrat...
Axigen Webmail 7.4.1 Directory Traversal
We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a very serious web vulnerability discovered by Acunetix WVS in Axigen. "Axigen is an integrat...
Axigen Webmail Directory Traversal Vulnerability
Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen Webmail 7.4.1 is vulnerable; other versions may be...
Axigen Webmail 1.0.1 - Directory Traversal
Axigen Webmail 1.0.1 - Directory Traversal source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information...
Axigen Webmail 1.0.1 - Directory Traversal
source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen...
Axigen Webmail Directory Traversal Vulnerability
Axigen Webmail is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
AXIGEN Webmail < 7.1.0 HTML Body Script Insertion
The version of AXIGEN Webmail running on the remote host is earlier than 7.1.0. Such versions fail to fully sanitize text in the body of email messages. If an attacker can trick a user into opening a specially crafted message using the affected webmail application, this can be leveraged to inject...
Axigen Mail Server HTML Injection Vulnerability
Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Axigen WebMail/WebAdmin Detection (HTTP)
HTTP based detection of Axigen WebMail SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100176";...
Axigen Mail Server HTML Injection Vulnerability
Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication...
CVE-2009-1484
Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...
Cross site scripting
Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2009-1484
Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2009-1484
AXIGEN Mail Server Webmail (version 6.2.2) is affected by a cross-site scripting (XSS) vulnerability in the web mail interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. Multiple sources (NVD, Red Hat, OpenVAS/Nessus references)...
Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference
Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...