CVE-2015-9058

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

Open redirect

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

CVE-2015-9057

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

CVE-2015-9058

Open redirect vulnerability in Proxmox Mail Gateway (pre hotfix 4.0-8-097d26a9) allows a remote attacker to use the destination parameter to redirect users to arbitrary web sites, enabling phishing via trusted gateways. Affected product: Proxmox Mail Gateway. Root cause: improper handling of the ...

CVE-2015-9057

CVE-2015-9057 describes multiple cross-site scripting (XSS) vulnerabilities affecting Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9. The issue allows remote attackers to inject arbitrary web script or HTML via parameters in URLs such as /users/index.htm, /quarantine/spam/manage.htm, /quaran...

CVE-2015-9058

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

CVE-2015-9058: URL Redirection to Untrusted Site

Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

PT-2017-7539

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 4.0-8-097d26a9 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter. This can be exploited to trick users into...

CVE-2015-9057: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

PT-2017-7538

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 4.0-8-097d26a9 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via multiple parameters. The affected API...

SQL Injection Vulnerability in Mail Delivery Gateway System of Beijing Anning Innovation Network Technology Co.

Beijing Anning Innovation Network Technology Co., Ltd. mail delivery gateway system is an independent and powerful mail security system, applicable to the mail system of different user sizes of anti-virus, anti-spam needs, can be deployed in gateway type, can also be distributed embedded...

DLA-95-1 clamav - security update

Bulletin has no description...

Proxmox Mail Gateway跨站脚本和HTML注入漏洞

Bugtraq ID:66169 CVE ID:CVE-2014-2325 Proxmox Mail Gateway是一个邮件网关。 Proxmox Mail Gateway存在反射型跨站脚本和存储型跨站脚本漏洞，允许攻击者利用漏洞提交恶意数据，可获取敏感信息或劫持用户会话。 0 Proxmox Mail Gateway 3.1 Proxmox Mail Gateway 3.2已经修复该漏洞，建议用户下载更新： http://proxmox.com https://IP/objects/who/index.htm?itemid=1&gid=2&state=...

Aker Secure Mail Gateway <= 2.5.2 XSS Vulnerability - Active Check

Aker Secure Mail Gateway is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2325

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

CVE-2014-2325

Affected product: Proxmox Mail Gateway. Vulnerability: reflected and stored XSS in multiple parameters. Details from connected docs: an attacker can inject arbitrary script/HTML via the (1) state parameter to objects/who/index.htm or (2) user email address to quarantine/spam/manage.htm. Versions:...

CVE-2014-2325

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

PT-2014-4625

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 3.1-5829 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the state parameter to the "objects/who/index.htm" endpoint or the User email addres...