uebimiau webmail 2.7.2 - Stored XSS

No description provided by source. !/usr/bin/python ''' Exploit Title: Uebimiau Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.uebimiau.org/ Software Link: http://www.uebimiau.org/downloads/uebimiau-2.7.2-any.zip Version: 2.7.2 Gr33Tz:...

symantec mail-gear 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including the string...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

CVE-2012-2591

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

CVE-2012-2591

CVE-2012-2591 affects EmailArchitect Email Server 10.0 and 10.0.0.3. The vulnerability is cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the From or Date fields in an email. Root cause is improper input handling in these fields (XSS). Impact per...

PT-2014-2253

Name of the Vulnerable Software and Affected Versions EmailArchitect Email Server versions 10.0 through 10.0.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the From or Date field in an email, potentially leading to cross-site scripting XSS attacks...

CVE-2012-2591: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

dovecot security update

Package : dovecot Version : 1:1.2.15-7+deb6u1 CVE ID : CVE-2014-3430 Debian Bug : 747549 It was discovered that the Dovecot email server is vulnerable to a denial of service attack against imap/pop3-login processes due to incorrect handling of the closure of inactive SSL/TLS connections...

DLA-0004-1 dovecot - security update

Bulletin has no description...

DSA-2954-1 dovecot - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2954-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SmarterMail Enterprise and Standard 11.x - Persistent Cross-Site Scripting

SmarterMail Enterprise and Standard 11.x - Persistent Cross-Site Scripting Click Me, Please...\r\n NOTE: javascript html char encode = then you will be able to get into the victim's mailbox via the url: http://WebSite/Smarter/Default.aspx I used phpmailer class for beside of the ex...

SmarterMail 11.x Cross Site Scripting

Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/Smarter/Default.aspx I used phpmailer class for beside of the exploit so you need to download it here and run the exploit in the phpmailer...

Nmap NSE 6.01: smtp-open-relay

Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...

Nmap NSE 6.01: imap-capabilities

Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. OpenVAS Vulnerability Test $Id: gbnmap6imapcapabilities.nasl 7148 2017-09-15 13:01:14Z...

uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting

uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: Uebimiau Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.uebimiau.org/ Software Link: http://www.uebimiau.org/downloads/uebimiau-2.7.2-any.zip Version...

Uebimiau Webmail 2.7.2 Cross Site Scripting

!/usr/bin/python ''' Exploit Title: Uebimiau Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.uebimiau.org/ Software Link: http://www.uebimiau.org/downloads/uebimiau-2.7.2-any.zip Version: 2.7.2 Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager,...

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

EmailArchitect Enterprise Email Server 10.0 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting

xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Xeams Email Server Version: 4.4 Build 5720 Vendor Site: http://www.xeams.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...