1050 matches found
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities exist in Horde IMP before version 5.0.18 and Horde Groupware Webmail Edition before 4.0.6. Remote attackers can inject arbitrary web script or HTML by exploiting parameters including composeCache , rtemode , filename_ *, formname , or IMAP mailb...
CVE-2012-0791
Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...
CVE-2012-0909
CVE-2012-0909 is an XSS in Horde_Form within Horde Groupware Webmail Edition prior to 4.0.6. Public records show fixes in Horde3 branch to 3.3.13 (openSUSE openSUSE-SU-2012:0286-1) and related security updates; remediation involves upgrading to Horde Groupware Webmail Edition 4.0.6 or newer, or H...
CVE-2012-0909
Cross-site scripting XSS vulnerability in HordeForm in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information...
CVE-2012-0909: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HordeForm in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information...
CVE-2012-0791: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...
ATMAIL WebMail v6.3.4 - Multiple Web Vulnerabilities
Document Title: =============== ATMAIL WebMail v6.3.4 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=375 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 375...
Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection
------------------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.2 snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............:...
Tiki Wiki CMS Groupware 8.2 - snarf_ajax.php Remote PHP Code Injection
Tiki Wiki CMS Groupware 8.2 - snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1®exres=phpinfo®ex=//e%00/ Tiki internal filters remove all null bytes from user input, but for...
Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection
------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1®exres=phpinfo®ex=//e%00/ Tiki internal filters remove all null bytes from user input, but for some strange reason this doesn't happen within admin sessions. So,...
Tiki Wiki CMS Groupware < 8.1 URL Multiple XSS Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware Cross Site Scripting
Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...
CVE-2010-5008
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
CVE-2010-5008
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
Sql injection
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
CVE-2010-5008
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
CVE-2010-5008
CVE-2010-5008 describes a SQL injection affecting BrightSuite Groupware 5.4, exploitable via the ContactID parameter in pages/contact_list_mail_form.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and availabil...
PT-2011-1943
Name of the Vulnerable Software and Affected Versions BrightSuite Groupware version 5.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the ContactID parameter in the "pages/contact list mail form.asp" page. Recommendations F...
CVE-2010-5008: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
JVN#84838479: Cybozu Office vulnerable in restricting access
Cybozu Office is a groupware.Cybozu Office contains a vulnerability in restricting access permissions. Impact A user without the appropriate privileges may view an arbitrary user's attendance information. Solution Upgrade the Software Upgrade to Cybozu Office 9 that has addressed this...