608 matches found
CVE-2020-27982
CVE-2020-27982 affects IceWarp WebMail 11.4.5.0 and is an XSS vulnerability exploitable via the language parameter (e.g., /webmail/?language=). The root cause is improper handling of the language parameter, enabling arbitrary JavaScript execution in a victim’s browser (session hijacking/defacemen...
IceWarp Mail Server Detection (POP3)
POP3 based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IceWarp Mail Server Detection (SMTP)
SMTP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IceWarp Mail Server Detection (IMAP)
IMAP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter...
CVE-2020-27982
IceWarp 11.4.5.0 allows XSS via the language parameter...
Cross site scripting
IceWarp 11.4.5.0 allows XSS via the language parameter...
PT-2020-16888 · Icewarp · Icewarp
Name of the Vulnerable Software and Affected Versions: IceWarp version 11.4.5.0 Description: The issue allows for a Cross-Site Scripting XSS attack via the language parameter. This can potentially lead to malicious script execution on the client-side. The estimated number of affected devices and...
Icewarp WebMail 11.4.5.0 Cross Site Scripting
Title: IceWarp WebMail Cross-Site Scripting Vulnerability + Date: 2020/10/25 + Author: Harun Karakış + Vendor Homepage: www.icewarp.com + Tested on: Windows 10 + Versions: 11.4.5.0 + Vulnerable Parameter: "language" Get Method + Vulnerable File: /webmail/ + Cve:CVE-2020-27982 PoC: + Go to :...
IceWarp Email Server File Upload Vulnerability
IceWarp Email Server is a commercial email and groupware server developed by IceWarp. A file upload vulnerability exists in IceWarp Email Server 12.3.0.1, which can be exploited by an attacker to upload dangerous JavaScript files...
IceWarp Email Server File Upload Vulnerability (CNVD-2020-46560)
IceWarp Email Server is a commercial email and groupware server developed by IceWarp. A file upload vulnerability exists in IceWarp Email Server 12.3.0.1, which can be exploited by an attacker to upload files and consume disk space...
IceWarp Email Server Access Control Error Vulnerability
IceWarp Email Server is a commercial email and groupware server developed by IceWarp. An access control error vulnerability exists in IceWarp Email Server 12.3.0.1. No detailed vulnerability details are provided at this time...
CVE-2020-14066
IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access...
CVE-2020-14065
IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space...
CVE-2020-14066
IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access...
CVE-2020-14064
IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts...
CVE-2020-14064
IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts...
CVE-2020-14065
IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space...