Hastymail2 Webmail 1.1 RC2 Cross Site Scripting

!/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download Version: 1.1 RC2 Gr33Tz: @aviadgolan , @benhayak,...

CVE-2012-4058

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

CVE-2012-4058

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

PT-2012-5176

Name of the Vulnerable Software and Affected Versions SocketMail Pro version 2.2.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the subject of an email. This could potentially lead to unauthorized actions on the affected system...

CVE-2012-4058: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

RoundCube Webmail cross-site request forgery vulnerability

Overview RoundCube Webmail from the RoundCube Project contains a cross-site request forgery vulnerability. RoundCube Webmail is an open source webmail client from the RoundCube Project. RoundCube Webmail contains a cross-site request forgery vulnerability that may allow disclosure of information...

JVN#33820033 RoundCube Webmail cross-site request forgery vulnerability

RoundCube Webmail is an open source webmail client from the RoundCube Project. RoundCube Webmail contains a cross-site request forgery vulnerability that may allow disclosure of information such as email subject lines. Impact Information such as email subject lines may be disclosed on the web...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...

CVE-2007-1515

Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...

CVE-2006-0663

Multiple cross-site scripting XSS vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via 1 an email subject; 2 an encoded javascript URI, as demonstrated using "javascript:"; or 3 when the Domino Web Access ActiveX control is...

CVE-2006-0663: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via 1 an email subject; 2 an encoded javascript URI, as demonstrated using "java script:"; or 3 when the Domino Web Access ActiveX control is...

IBM Lotus Domino 6.x7.0 iNotes - Email Subject Cross-Site Scripting

IBM Lotus Domino 6.x7.0 iNotes - Email Subject Cross-Site Scripting source: https://www.securityfocus.com/bid/16577/info IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities. These vulnerabilities can allow attackers to carry out a variety of attacks, including...

IBM Lotus Domino 6.x/7.0 iNotes - Email Subject Cross-Site Scripting

source: https://www.securityfocus.com/bid/16577/info IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities. These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials. Proof of concept f...