49 matches found
CVE-2007-4172: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Open Webmail OWM 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchtype, 2 longpage, and 3 page parameters to a openwebmail-main.pl; the 4 prefscaller, 5 userfirsttime, 6 page, 7 sort, 8...
OpenWebMail Multiple XSS vuln.
OpenWebMail Multiple XSS vuln. Vuln. discovered by : r0t Date: 2 August 2007 vendor:openwebmail.org orginal advisory: http://pridels-team.blogspot.com/2007/08/openwebmail-multiple-xss-vuln.html affected versions:2.52 20060831 and previous OpenWebMail contains multiple flaws that allows a remote...
CVE-2006-3233
CVE-2006-3233 describes a cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52 and earlier builds released before 2006-06-18, specifically in the openwebmail-read.pl component. An attacker can inject arbitrary web script or HTML via the from field, enabling potential credential or ...
CVE-2006-3229: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Open WebMail OWM 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the 1 To and 2 From fields in openwebmail-main.pl, and possibly 3 other unspecified vectors related to "openwebmailerr...
CVE-2006-3233: Undefined Security Weakness
Cross-site scripting XSS vulnerability in openwebmail-read.pl in Open WebMail OWM 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields,...
Cross site scripting
Cross-site scripting XSS vulnerability in ow-shared.pl in OpenWebMail OWM 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in 1 openwebmail-send.pl, 2 openwebmail-advsearch.pl, 3 openwebmail-folder.pl, 4 openwebmail-prefs.pl, 5...
CVE-2006-2190
Cross-site scripting XSS vulnerability in ow-shared.pl in OpenWebMail OWM 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in 1 openwebmail-send.pl, 2 openwebmail-advsearch.pl, 3 openwebmail-folder.pl, 4 openwebmail-prefs.pl, 5...
CVE-2006-2190
CVE-2006-2190 is an XSS vulnerability in OpenWebMail (OWM) affecting 2.51 and earlier, via the sessionid parameter in ow-shared.pl and related scripts (openwebmail-send.pl, openwebmail-advsearch.pl, openwebmail-folder.pl, openwebmail-prefs.pl, openwebmail-abook.pl, openwebmail-read.pl, openwebmai...
CVE-2006-2190
Cross-site scripting XSS vulnerability in ow-shared.pl in OpenWebMail OWM 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in 1 openwebmail-send.pl, 2 openwebmail-advsearch.pl, 3 openwebmail-folder.pl, 4 openwebmail-prefs.pl, 5...
CVE-2006-2190: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ow-shared.pl in OpenWebMail OWM 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in 1 openwebmail-send.pl, 2 openwebmail-advsearch.pl, 3 openwebmail-folder.pl, 4 openwebmail-prefs.pl, 5...
Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability
The remote webmail server is affected by a cross-site scripting flaw. The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a...
CVE-2005-2863
Cross-site scripting XSS vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter...
CVE-2005-2863
Cross-site scripting XSS vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter...
CVE-2005-2863
OpenWebMail contains an XSS vulnerability CVE-2005-2863 in the openwebmail-main.pl script (sessionid parameter) affecting OpenWebMail 2.41. The flaw allows remote injection of arbitrary web script/HTML. NVD notes a CVSS v2 base score of 4.3 (Medium) with network access, no authentication, and par...
CVE-2005-2863: Undefined Security Weakness
Cross-site scripting XSS vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter...
openXSS.txt
Discovered by s3cure Risk: small When we are logged on account we see: http://site.site/cgi-bin/openwebmail/openwebmail-main.pl?sessionid=yourlogin-session-0.274744641575129&action=listmessagesafterlogin Now we can do small xss:...
CVE-2004-2284
The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...
CVE-2004-2284
CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...
CVE-2004-2284: Undefined Security Weakness
The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...
