Lucene search
+L

1987 matches found

CNVD
CNVD
added 2017/12/22 12:00 a.m.11 views

Code-Crafters Ability Mail Server Cross-Site Scripting Vulnerability

Code-Crafters Ability Mail Server is a set of mail server software from Code-Crafters Software UK. The software provides SMTP, POP3, WebMail and other common functions, and supports remote management, virus protection, content filtering and so on. A cross-site scripting vulnerability exists in...

6.1CVSS6.6AI score0.01383EPSS
SaveExploits5References1
OSV
OSV
added 2017/12/20 4:29 p.m.7 views

CVE-2017-17752

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

6.1CVSS5.8AI score0.01383EPSS
SaveExploits5References1
Prion
Prion
added 2017/12/20 4:29 p.m.14 views

Cross site scripting

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

4.3CVSS6AI score0.01383EPSS
SaveExploits5References1Affected Software1
Cvelist
Cvelist
added 2017/12/20 4:00 p.m.34 views

CVE-2017-17752

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

6AI score0.01383EPSS
SaveExploits5References1
CVE
CVE
added 2017/12/20 4:00 p.m.62 views

CVE-2017-17752

CVE-2017-17752 affects Ability Mail Server 3.3.2 from Code-Crafters Software UK. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via the body of an email and results in JavaScript execution on the Read Mail screen (the /_readmail URI). Affected component is the mail v...

6.1CVSS5.9AI score0.01383EPSS
SaveExploits5References1Affected Software1
Exploit DB
Exploit DB
added 2017/12/20 12:00 a.m.50 views

Ability Mail Server 3.3.2 - Cross-Site Scripting

Exploit Title: Ability Mail Server 3.3.2 Persistent Cross Site Scripting XSS CVE: CVE-2017-17752 Date: 19-12-2017 Software Link: http://download.codecrafters.com/ams3.exe Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.codecrafters.com...

6.1CVSS6.1AI score0.01383EPSS
SaveExploits5
exploitpack
exploitpack
added 2017/12/20 12:00 a.m.58 views

Ability Mail Server 3.3.2 - Cross-Site Scripting

Ability Mail Server 3.3.2 - Cross-Site Scripting Exploit Title: Ability Mail Server 3.3.2 Persistent Cross Site Scripting XSS CVE: CVE-2017-17752 Date: 19-12-2017 Software Link: http://download.codecrafters.com/ams3.exe Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr...

4.3CVSS6.1AI score0.01383EPSS
SaveExploits5
CNVD
CNVD
added 2017/10/25 12:00 a.m.9 views

ArGoSoft Mini Mail Server Denial of Service Vulnerability

ArGoSoft Mini Mail Server is a full-featured mail server for Windows platform that supports POP3/SMTP/FINGER protocols. A denial of service vulnerability exists in ArGoSoft Mini Mail Server 1.0.0.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

5.3CVSS6.8AI score0.04534EPSS
SaveExploits5References1
Prion
Prion
added 2017/10/24 5:29 p.m.15 views

Denial of service

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5CVSS5.4AI score0.04534EPSS
SaveExploits5References1Affected Software1
OSV
OSV
added 2017/10/24 5:29 p.m.9 views

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5.3CVSS5.8AI score0.04534EPSS
SaveExploits5References1
NVD
NVD
added 2017/10/24 5:29 p.m.16 views

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5.3CVSS5.4AI score0.04534EPSS
SaveExploits5References1
CVE
CVE
added 2017/10/24 5:00 p.m.66 views

CVE-2017-15223

The CVE-2017-15223 entry applies to ArGoSoft Mini Mail Server 1.0.0.2 and earlier, describing a remote denial-of-service that wastes CPU/memory resources via unspecified vectors, potentially triggering an infinite loop. Connected sources corroborate a DoS vulnerability in this software and note p...

5.3CVSS5.3AI score0.04534EPSS
SaveExploits5References1Affected Software1
Cvelist
Cvelist
added 2017/10/24 5:00 p.m.25 views

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5.3AI score0.04534EPSS
SaveExploits5References1
Prion
Prion
added 2017/10/23 6:29 p.m.24 views

Cross site scripting

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

3.5CVSS6.1AI score0.01552EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2017/10/23 6:29 p.m.22 views

CVE-2015-5379

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

5.4CVSS5.4AI score0.01552EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/10/23 6:00 p.m.39 views

CVE-2015-5379

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

5.4AI score0.01552EPSS
SaveExploits0References4
CVE
CVE
added 2017/10/23 6:00 p.m.77 views

CVE-2015-5379

Vulnerability (CVE-2015-5379) : AXIGEN Mail Server’s Ajax WebMail interface (actions.hsp) before version 9.0 is vulnerable to cross-site scripting via crafted HTML attachments viewed in the WebMail “View attachment” function. Root cause: attachments in the Ajax WebMail view execute script/HTML, e...

5.4CVSS5.3AI score0.01552EPSS
SaveExploits0References4Affected Software1
zdt
zdt
added 2017/10/23 12:00 a.m.31 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

5CVSS5.4AI score0.04534EPSS
SaveExploits5
exploitpack
exploitpack
added 2017/10/21 12:00 a.m.37 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

5CVSS5.4AI score0.04534EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2017/10/21 12:00 a.m.38 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

!/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors...

5.3CVSS5.6AI score0.04534EPSS
SaveExploits5
Rows per page
Query Builder