618 matches found
CVE-2020-25925
Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...
Cross site scripting
Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...
CVE-2020-25925
CVE-2020-25925 describes a cross-site scripting (XSS) flaw in IceWarp WebClient’s Webmail Calendar (version 10.3.5). The vulnerability allows an attacker to inject arbitrary web script or HTML through the p4 field, enabling client-side code execution. The available connected documents confirm the...
CVE-2020-25925
Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...
IceWarp WebClient 跨站脚本漏洞
Icewarp IceWarp WebClient is a web-based mail service client from IceWarp Icewarp. A cross-site scripting vulnerability exists in IceWarp WebClient, which stems from the P4 field of the product's Webmail Calender feature not validating user input data. The vulnerability can be exploited to execut...
IceWarp 反射型XSS (CVE-2020-8512)漏洞
...
Command Execution Vulnerability in IceWarp Mail Server
IceWarp Mail Server is an enterprise-grade email, collaboration and mobile solution for organizations of all sizes. A command execution vulnerability exists in IceWarp Mail Server, which can be exploited by an attacker to perform command execution by constructing malicious statements...
CVE-2020-27982
IceWarp WebMail version 11.4.5.0 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input via the language parameter in the /webmail/ endpoint. An attacker can exploit this by providing a malicious payload in a GET request (e.g., `?language=
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter...
IceWarp Mail Server Detection (POP3)
POP3 based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IceWarp Mail Server Detection (IMAP)
IMAP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IceWarp Mail Server Detection (SMTP)
SMTP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter...
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter...
Cross site scripting
IceWarp 11.4.5.0 allows XSS via the language parameter...
PT-2020-16888 · Icewarp · Icewarp
Name of the Vulnerable Software and Affected Versions: IceWarp version 11.4.5.0 Description: The issue allows for a Cross-Site Scripting XSS attack via the language parameter. This can potentially lead to malicious script execution on the client-side. The estimated number of affected devices and...
Icewarp WebMail 11.4.5.0 Cross Site Scripting
Title: IceWarp WebMail Cross-Site Scripting Vulnerability + Date: 2020/10/25 + Author: Harun Karakış + Vendor Homepage: www.icewarp.com + Tested on: Windows 10 + Versions: 11.4.5.0 + Vulnerable Parameter: "language" Get Method + Vulnerable File: /webmail/ + Cve:CVE-2020-27982 PoC: + Go to :...
IceWarp Email Server File Upload Vulnerability (CNVD-2020-46560)
IceWarp Email Server is a commercial email and groupware server developed by IceWarp. A file upload vulnerability exists in IceWarp Email Server 12.3.0.1, which can be exploited by an attacker to upload files and consume disk space...
IceWarp Email Server Access Control Error Vulnerability
IceWarp Email Server is a commercial email and groupware server developed by IceWarp. An access control error vulnerability exists in IceWarp Email Server 12.3.0.1. No detailed vulnerability details are provided at this time...