Axigen Mail Server 8.0.1 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link:...

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link: http://www.axigen.com/mail-server/download-axigen-mail-server-801-for-windows.html Timeline: 29 May 2012: Vulnerability...

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting

Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Axigen Mail Server Version: 8.0.1 Windows/x86 Vendor Site: http://www.axigen.com Software Download Link:...

CVE-2010-3460

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3459

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3460

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3459

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3459

CVE-2010-3459 is an XSS vulnerability in AXIGEN Mail Server’s Ajax WebMail interface, affecting versions before 7.4.2. Practical impact: remote attackers may inject arbitrary script/HTML via unspecified vectors. Remediation: upgrade to AXIGEN 7.4.2 or later. No exploitation details are provided i...

CVE-2010-3460

AXIGEN Mail Server 7.4.1 for Windows is affected by a directory traversal vulnerability in its HTTP interface, allowing remote attackers to read arbitrary files via a URL containing an encoded backslash (%5C). The issue is documented in CVE-2010-3460 with an NVD CVSSv2 base score of 5.0 (AV:N/AC:...

CVE-2010-3459: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Directory Traversal in Axigen v7.4.1 running on Windows

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a very serious web vulnerability discovered by Acunetix WVS in Axigen. "Axigen is an integrat...

CVE-2010-3460: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

Axigen Webmail 7.4.1 Directory Traversal

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a very serious web vulnerability discovered by Acunetix WVS in Axigen. "Axigen is an integrat...

Axigen Webmail 1.0.1 - Directory Traversal

source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen...

Axigen Webmail 1.0.1 - Directory Traversal

Axigen Webmail 1.0.1 - Directory Traversal source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information...

Axigen Webmail Directory Traversal Vulnerability

Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen Webmail 7.4.1 is vulnerable; other versions may be...

Axigen Webmail Directory Traversal Vulnerability

Axigen Webmail is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AXIGEN Webmail < 7.1.0 HTML Body Script Insertion

The version of AXIGEN Webmail running on the remote host is earlier than 7.1.0. Such versions fail to fully sanitize text in the body of email messages. If an attacker can trick a user into opening a specially crafted message using the affected webmail application, this can be leveraged to inject...