11 matches found
EUVD-2011-4467
Malware in sbrugna...
CVE-2011-4542
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...
CVE-2011-4542
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...
CVE-2011-4542: Improper Neutralization of Special Elements used in an SQL Command
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...
PT-2011-4977
Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the rs or rsargs parameter in a mailbox Drafts action to the default URI. Recommendations For Hastymail2...
CVE-2011-4541
Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...
PT-2011-4976
Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...
CVE-2011-4541: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...
CVE-2011-4541
Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...
CVE-2011-4541
The CVE-2011-4541 entry concerns Hastymail2 (version 2.1.1 prior to RC2) and is caused by a cross-site scripting (XSS) vulnerability in index.php where an attacker can inject script/HTML via the rs parameter in the mailbox Drafts action. Public references in NVD and CVE listings confirm the impac...