Hastymail2 - rs=passthru RCE Detection (CVE-2011-4542)

Detects CVE-2011-4542 by POSTing rs=passthru&rsargs=asd&rsargs=id to mailbox Drafts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-4542 by POSTing rs=passthru&rsargs=asd&rsargs=id to mailbox Drafts.""" import re from kittysploit import from lib.protocols.http.httpclient import...

EUVD-2009-5008

Malware in sbrugna...

EUVD-2010-4611

Malware in sbrugna...

EUVD-2011-4467

Malware in sbrugna...

hastymail2 webmail 1.1 rc2 - Stored XSS

No description provided by source. !/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download Version: 1.1 RC2...

Hastymail2 Webmail 1.1 RC2 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download...

Hastymail2 Webmail 1.1 RC2 Cross Site Scripting

!/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download Version: 1.1 RC2 Gr33Tz: @aviadgolan , @benhayak,...

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link:...

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download Version: 1.1 RC2 Gr33Tz: @aviadgolan , @benhayak,...

Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

CVE-2011-4542

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

Authentication flaw

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

CVE-2011-4542

The CVE-2011-4542 vulnerability affects Hastymail2 2.1.1 prior to RC2, enabling remote command execution via unsanitized inputs in the rs and rsargs[] parameters of the Drafts action at the default URI. The root cause is improper sanitization of user-supplied input, allowing arbitrary commands to...

CVE-2011-4542

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

PT-2011-4977

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the rs or rsargs parameter in a mailbox Drafts action to the default URI. Recommendations For Hastymail2...

CVE-2011-4542: Improper Neutralization of Special Elements used in an SQL Command

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

CVE-2011-4541

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

PT-2011-4976

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

CVE-2011-4541: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...