618 matches found
IceWarp Mail Server 输入验证错误漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration, and more. A security vulnerability exists in IceWarp Mail Server that stems from an open redirection vulnerability via the refer...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
Cross site scripting
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
Icewarp Icearp 跨站脚本漏洞
Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...
CVE-2023-37728
IceWarp Webmail Server v10.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability reachable via the color parameter. The Nuclei template and related references describe an XSS that could allow an unauthenticated attacker to inject JavaScript and potentially access user sessions (cookie lea...
EUVD-2023-41605
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
PT-2023-6541 · Icewarp · Icewarp
Name of the Vulnerable Software and Affected Versions: IceWarp version 10.2.1 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the color parameter, allowing a remote attacker to conduct cross-site scripting attacks...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
Sql injection
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2022-35115
IceWarp WebClient DC2 Update 2 Build 9 (13.0.2.9) is affected by a SQL injection vulnerability exploitable via the search parameter in /webmail/server/webmail.php. The issue yields a CVSSv3.1 score of 9.8 (CRITICAL) with Network attack vector, no user interaction, and requires no privileges. The ...
IceWarp WebClient SQL注入漏洞
IceWarp WebClient is a web-based mail service client from IceWarp, Inc. A security vulnerability exists in IceWarp WebClient DC2 version 13.0.2.9, which originates from an SQL injection vulnerability discovered via the search parameter of /webmail/server/webmail.php...
IceWarp WebClient Cross-Site Scripting Vulnerability
Icewarp IceWarp WebClient is a web-based mail service client from IceWarp Icewarp. A cross-site scripting vulnerability exists in IceWarp WebClient, which stems from the P4 field of the product's Webmail Calender feature not validating user input data. The vulnerability can be exploited to execut...