Cross site scripting

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter...

IceWarp WebClient Cross-Site Scripting Vulnerability

Icewarp IceWarp WebClient is a web-based mail service client from the Czech company Icewarp. A security vulnerability exists in IceWarp WebClient version v.10.2.1, which can be exploited by a remote attacker to execute arbitrary code via a well-constructed payload that is passed to the mid...

CVE-2023-39598

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter...

CVE-2023-39598

IceWarp WebClient 10.2.1 is affected by CVE-2023-39598: a Cross Site Scripting vulnerability that enables an attacker to run arbitrary script in the victim’s browser by crafting a payload to the mid parameter. The Nuclei template notes potential impacts such as session hijacking, defacement, or s...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

Cross site scripting

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

Cross site scripting

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

Code injection

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 is affected by a cross-site scripting (XSS) vulnerability in the color parameter. The issue, confirmed by multiple sources, allows injection of arbitrary JavaScript in the context of the victim’s browser. Remediation is to apply vendor patches/updates (per the NVD/Nuclei entries ...

IceWarp 跨站脚本漏洞

IceWarp is an integrated enterprise communication and collaboration platform from IceWarp, a Czech company, designed to provide organizations with the tools and functionality to support internal and external communication, collaboration and business processes. A security vulnerability exists in...