CVE-2015-2181

Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the 1 password or 2 username...

CVE-2015-2180

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password...

CVE-2015-2180: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password...

CVE-2015-2181: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the 1 password or 2 username...

openSUSE Security Update : roundcubemail (openSUSE-2016-1419)

roundcubemail was updated to version 1.1.7 and fixes the following issues : - Update to 1.1.7 - A maliciously crafted FROM value could cause extra parameters to be passed to the sendmail command boo1012493 - A maliciously crafted email could cause untrusted code to be executed cross site scriptin...

Security update for roundcubemail (important)

roundcubemail was updated to version 1.1.7 and fixes the following issues: - Update to 1.1.7 A maliciously crafted FROM value could cause extra parameters to be passed to the sendmail command boo1012493 A maliciously crafted email could cause untrusted code to be executed cross site scripting usi...

jaarverslag.nictiz.nl XSS vulnerability

Vulnerable URL: http://jaarverslag.nictiz.nl/2010/wp-content/plugins/wp-password/login.php?err=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

WordPress WP-Password 插件-login.php文件err参数-跨站脚本漏洞

No description provided by source...

PT-2017-6556

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.1.0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the password, specifically in the DBMail driver of the Password plugin. Recommendations For versions prio...

PT-2017-6557

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.1.0 Description The issue is related to multiple buffer overflows in the DBMail driver in the Password plugin. This could allow remote attackers to have an unspecified impact via the password or username variables...