608 matches found
Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)
"cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt "\xeb\x13\x5b\x31\xc0\x50\x31\xc0\x88\x43\x4a\x53". "\xbb\x0d\x25\x86\x7c". //WinExec, kernel32.dll XP SP3...
Icewarp Merak Mail Server 9.4.1 Overflow
"cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt "\xeb\x13\x5b\x31\xc0\x50\x31\xc0\x88\x43\x4a\x53". "\xbb\x0d\x25\x86\x7c". //WinExec, kernel32.dll XP SP3...
IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS
The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host is older than 9.4.0. Such versions reportedly fail to sanitize input passed to 'IMG' HTML tags in an email message before...
CVE-2008-5734
Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...
Cross site scripting
Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...
CVE-2008-5734
IceWarp Merak Mail Server Web Mail (IceWarp Merak Mail Server 9.3.2) is affected by CVE-2008-5734: an XSS flaw where an IMG tag in HTML emails is not sanitized, allowing a remote attacker to inject arbitrary script/HTML into a user’s browser. Root cause: improper sanitization of IMG HTML tag inpu...
CVE-2008-5734
Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...
IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS
Binary data 4800.prm...
Merak Mail Server邮件消息HTML注入漏洞
BUGTRAQ ID: 32969 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak Mail Server没有正确地过滤邮件消息中的IMG HTML标签便显示给了用于，如果攻击者发送了恶意邮件的话，当用户查看邮件时就会导致在浏览器会话中注入并执行任意HTML和脚本代码。 Icewarp Merak Mail Server 9.3.2 Icewarp ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icewarp.com/...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0218
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0218
IceWarp Merak Mail Server (admin/index.html) is affected by an XSS in the message parameter. The vulnerability arises from insufficient sanitization of user input, allowing an unauthenticated, remote attacker to inject arbitrary HTML/JavaScript that executes in the victim’s browser within the sit...
CVE-2008-0218
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
IceWarp Mail Server admin/index.html message Parameter XSS
The remote host is running IceWarp Merak Mail Server, a webmail server for Windows and Linux. The remote version of IceWarp fails to sanitize user input to the 'message ' parameter of the 'admin/index.html' script before using it to generate dynamic content. An unauthenticated, remote attacker ma...
IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting
IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
IceWarp Mail Server 9.1.1 - '/admin/index.html' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
CVE-2007-5046
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
Cross site scripting
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
CVE-2007-5046
Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...
CVE-2007-5046
CVE-2007-5046 describes a cross-site scripting (XSS) flaw in the Webmail interface of IceWarp Merak Mail Server prior to 9.0.0. The vulnerability allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an element attribute within an email message body, demonstrated by an o...