618 matches found
CVE-2008-0218
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0218
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0218
IceWarp Merak Mail Server (admin/index.html) is affected by an XSS in the message parameter. The vulnerability arises from insufficient sanitization of user input, allowing an unauthenticated, remote attacker to inject arbitrary HTML/JavaScript that executes in the victim’s browser within the sit...
IceWarp Mail Server admin/index.html message Parameter XSS
The remote host is running IceWarp Merak Mail Server, a webmail server for Windows and Linux. The remote version of IceWarp fails to sanitize user input to the 'message ' parameter of the 'admin/index.html' script before using it to generate dynamic content. An unauthenticated, remote attacker ma...
IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting
IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
IceWarp Mail Server 9.1.1 - '/admin/index.html' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Cross site scripting
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
CVE-2007-5046
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
CVE-2007-5046
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
IceWarp Merak Mail Server < 9.0.0 BODY Element XSS
The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host fails to properly sanitize email messages before displaying them. If a user reads a specially crafted message, a remote...
CVE-2007-5046
CVE-2007-5046 describes a cross-site scripting (XSS) flaw in the Webmail interface of IceWarp Merak Mail Server prior to 9.0.0. The vulnerability allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an element attribute within an email message body, demonstrated by an o...
IceWarp < 5.6.1 lang_settings Parameter Remote File Inclusion (deprecated)
Binary data 3688.prm...
Secunia Research: IceWarp Web Mail Two File Inclusion Vulnerabilities
====================================================================== Secunia Research 17/07/2006 - IceWarp Web Mail Two File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
IceWarp Multiple Script Remote File Inclusion
The remote host is running IceWarp Web Mail, a webmail product written in PHP that is distributed as a standalone application and is also bundled with VisNetic Mail Server and Merak Mail Server. The version of IceWarp Web Mail installed on the remote host fails to sanitize user-supplied input to...
CVE-2006-0817
CVE-2006-0817 is a directory traversal/remote file inclusion vulnerability in IceWarp Web Mail bundled with Merak/VisNetic Mail Server. The flaw stems from improper sanitization in the language/lang_settings parameters via the securepath function in accounts/inc/include.php and admin/inc/include....
CVE-2006-2484
Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2484
Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2484
CVE-2006-2484 affects IceWarp WebMail
IceWarp Cross-Site Scripting(XSS)
======================= Discovery by:LiNuXrOOt Site:www.alshmokh.com E-mail:[email protected] ======================= Example: /extendlicense/index.html?PHPSESSID=XSS...