1032 matches found
Open-Xchange OX Guard SQL Injection Vulnerability
Open-Xchange OX Guard is a security suite for email and documents. A SQL injection vulnerability exists in the public key discovery API calls of Open-Xchange OX Guard, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...
CVE-2015-5703
SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-5375
Cross-site scripting XSS vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web scrip...
Sql injection
SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web scrip...
CVE-2015-5375
Open-Xchange Server 6 / OX App Suite are affected by CVE-2015-5375: a cross-site scripting vulnerability in front-end dialogs used for printing content, related to object properties. Affected versions include Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, ...
CVE-2015-5375
Cross-site scripting XSS vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web scrip...
CVE-2015-5703
Open-Xchange OX Guard contains a SQL injection vulnerability in the public key discovery API calls prior to version 2.0.0-rev8. The flaw allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Mitigation is to upgrade to 2.0.0-rev8 or later (as per the linked ...
CVE-2015-5703
SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Open-Xchange (OX) App Suite Detection (HTTP)
HTTP based detection of Open-Xchange OX App Suite. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Open-Xchange Server Detection
The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Open-Xchange Security Advisory 2015-04-27
Product: Open-Xchange Server 6 / OX AppSuite Vendor: Open-Xchange GmbH Internal reference: 35982 Bug ID Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.6.1 Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.1-rev21...
Open-Xchange crossite scripting
Crossite scripting via attachment...
Open-Xchange Server and Open-Xchange AppSuite Cross-Site Scripting Vulnerabilities
Open-Xchange Server and Open-Xchange AppSuite OX AppSuite are both products of Open-Xchange, Inc. Open-Xchange Server is a semi-open-source project primarily used for the development of collaborative software; OX AppSuite is a suite of web cloud Open-Xchange Server is a semi-open source project...
CVE-2014-9466
Open-Xchange OX AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identifier."...
Open redirect
Open-Xchange OX AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identifier."...
CVE-2014-9466
Open-Xchange OX AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identifier."...
CVE-2014-9466
Open-Xchange Open-Xchange AppSuite/Server (Open-Xchange Server 6 / OX AppSuite) is affected by a directory-permissions handling issue in the backend that allows remote authenticated users to read files via unspecified vectors related to the folder identifier. The vulnerability is an information d...
Open-Xchange Security Advisory 2015-02-12
Product: Open-Xchange Server 6 / OX AppSuite Vendor: Open-Xchange GmbH Internal reference: 35889 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.6.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version:...