Roundcube Webmail 跨站脚本漏洞

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message search, spell checking, etc. A cross-site scripting vulnerability exists in Roundcube Webmail, and no detailed vulnerability details are currently available...

FreeBSD : Roundcube -- XSS vulnerability (47197b47-6a1a-11ec-8be6-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 47197b47-6a1a-11ec-8be6-d4c9ef517024 advisory. - The Roundcube project reports: Cross-site scripting XSS via HTML messages with malicious CSS content...

Roundcube -- XSS vulnerability

The Roundcube project reports: Cross-site scripting XSS via HTML messages with malicious CSS content...

PT-2021-7305 · Roundcube +3 · Roundcube +3

Name of the Vulnerable Software and Affected Versions: Roundcube versions 1.4.13 and earlier, 1.5.x before 1.5.2 Description: The issue allows for cross-site scripting XSS attacks via crafted Cascading Style Sheets CSS token sequences in HTML e-mail messages. This can enable a remote attacker to...

The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Roundcube webmail client stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code using the search or searchparams parameters...

The vulnerability of the RoundCube Webmail email client, related to the use of files and directories accessible from external parties, allows a hacker to gain unauthorized access to arbitrary files in the host’s file system.

The vulnerability of the RoundCube Webmail email client stems from the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to arbitrary files in the host’s file system, including configuration files...

Debian DLA-2840-1 : roundcube - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2840 advisory. - Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

Debian: Security Advisory (DLA-2840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2840-1] roundcube security update

Debian LTS Advisory DLA-2840-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 06, 2021 https://wiki.debian.org/LTS Package : roundcube Version : 1.2.3+dfsg.1-4+deb9u9 CVE ID : CVE-2021-44025 CVE-2021-44026 Debian Bug : 1000156 It was discovered that...

DLA-2840-1 roundcube - security update

Bulletin has no description...

Debian DSA-5013-1 : roundcube - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5013 advisory. - Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

Debian: Security Advisory (DSA-5013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5013-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5013-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5013-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5013-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 27, 2021 https://www.debian.org/security/faq -...

DSA-5013-1 roundcube - security update

Bulletin has no description...

[SECURITY] Fedora 34 Update: roundcubemail-1.4.12-1.fc34

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Vulnerabilities fixed in Roundcube Webmail

Roundcube has fixed vulnerabilities in Webmail and Webmail LTS. The vulnerabilities allow a malicious party to launch a cross-site scripting attack, or to perform an SQL injection execute and thus gain access to the data in the underlying database. Roundcube has released updates to address the...

Cross-site Scripting (XSS)

roundcube:sid is vulnerable to cross-site scripting XSS attacks. The library is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

SQL Injection

Roundcube is vulnerable to cross-site scripting XSS attacks. Attacker are able to inject malicious scripts via search or searchparameters resulting in SQL injection...

Roundcube Webmail < 1.3.17, 1.4.x < 1.4.12 Multiple Vulnerabilities

Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail"; if...