57 matches found
CVE-2006-3229
Open WebMail (OWM) 2.52 (and earlier builds released before 2006-05-12) is affected by a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via the To and From fields in openwebmail-main.pl, and possibly via other vectors related to ...
Open WebMail <=2.51 XSS vuln.
Open WebMail =2.51 XSS vuln. Vulnerability discovered by : r0t Date: 27 april 2006 vendorlink:http://openwebmail.org/ affected versions:2.51 and prior orginal advisory: http://pridels.blogspot.com/2006/04/open-webmail-251-xss-vuln.html Vuln. Description: Open WebMail contains a flaw that allows a...
Open WebMail Content-Type XSS
The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted...
Open WebMail Detection
This script detects whether the target is running Open WebMail and extracts version numbers and locations of any instances found. Open WebMail is a webmail package written in Perl that provides access to mail accounts via POP3 or IMAP. See for more information. OpenVAS Vulnerability Test $Id:...
Open WebMail Detection
This script detects whether the target is running Open WebMail and extracts version numbers and locations of any instances found. Open WebMail is a webmail package written in Perl that provides access to mail accounts via POP3 or IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some text...
Open WebMail userstat.pl Arbitrary Command Execution
The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on the target using the privileges under which the web server operates. For further...
Open WebMail Content-Type XSS
The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted...
Open WebMail vacation.pl Arbitrary Command Execution
The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Open WebMail vacation.pl Arbitrary Command Execution
The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on a target using the privileges under which the web server operates. For further...
Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability
The remote webmail server is affected by a cross-site scripting flaw. Description : The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script cod...
Open WebMail userstat.pl Arbitrary Command Execution
The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Open WebMail sessionid Parameter XSS
The installed version of Open WebMail on the remote host is prone to cross-site scripting attacks because it fails to sanitize user- supplied input to the 'sessionid' parameter of the 'openwebmail-main.pl' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2004-2458
Open WebMail 2.30 and earlier is affected. When use_syshomedir is disabled or create_syshomedir is enabled, the application creates new directories before authentication, enabling a remote attacker to create arbitrary directories. This is a client/server vulnerability in Open WebMail’s directory ...
CVE-2004-2458
Open WebMail 2.30 and earlier, when usesyshomedir is disabled or createsyshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories...
Open WebMail Shell Escape Arbitrary Command Execution
According to its banner, the version of Open WebMail installed on the remote host may allow execution of arbitrary shell commands due to its failure to ensure shell escape characters are removed from filenames and other strings before trying to read from them. %NASLMINLEVEL 70300 C Tenable Networ...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435
Open WebMail (OWM) before version 2.51 (20050430) is vulnerable to remote command execution when an authenticated user supplies a filename containing shell metacharacters. The root cause is failure to properly remove shell escapes from filenames before processing them, enabling arbitrary command ...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...