IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this iss...

IceWarp Merak Mail Server 9.4.1 - cleanHTML() Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - cleanHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

Stack overflow

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

Quick 'n Easy Mail Server 3.3 (Demo) Remote Denial of Service PoC

No description provided by source. --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long...

Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...

Quick n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

Quick n Easy Mail Server 3.3 Demo - Remote Denial of Service PoC --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Axigen Mail Server HTML Injection Vulnerability

Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Axigen Mail Server HTML Injection Vulnerability

Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication...

CVE-2009-1484

Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...

Cross site scripting

Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2009-1484

Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2009-1484

AXIGEN Mail Server Webmail (version 6.2.2) is affected by a cross-site scripting (XSS) vulnerability in the web mail interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. Multiple sources (NVD, Red Hat, OpenVAS/Nessus references)...

Icewarp Merak Mail Server 9.4.1 Base64FileEncode() BOF PoC

No description provided by source. ?php / Icewarp Merak Mail Server 9.4.1 IceWarpServer.APIObject/api.dll Base64FileEncode stack based buffer overflow poc by Nine:Situations:Group::surfista site: http://retrogod.altervista.org/ api.dll contains a stack based buffer overflow in the second argument...

Icewarp Merak Mail Server 9.4.1 - Base64FileEncode() Buffer Overflow (PoC)

Icewarp Merak Mail Server 9.4.1 - Base64FileEncode Buffer Overflow PoC "cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt...

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

"cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt "\xeb\x13\x5b\x31\xc0\x50\x31\xc0\x88\x43\x4a\x53". "\xbb\x0d\x25\x86\x7c". //WinExec, kernel32.dll XP SP3...

Icewarp Merak Mail Server 9.4.1 Base64FileEncode() BOF PoC

Exploit for unknown platform in category dos / poc ========================================================== Icewarp Merak Mail Server 9.4.1 Base64FileEncode BOF PoC ========================================================== "cgi-fcgi" die"Launch from the merak php console!"; if...