2113 matches found
Cross site scripting
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
Cross site scripting
Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...
UBUNTU-CVE-2020-18671
Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...
UBUNTU-CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
CVE-2020-18671
Summary: CVE-2020-18671 is a Cross Site Scripting (XSS) vulnerability in Roundcube Mail that can be triggered via the SMTP config path in /installer/test.php. Connected sources (OSV/OpenSUSE advisories) confirm affected versions up to 1.4.x and indicate remediation by upgrading to Roundcube 1.3.1...
CVE-2020-18671
Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...
CVE-2020-18671
Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...
CVE-2020-18670
CVE-2020-18670 affects Roundcube Webmail with stored XSS in /installer/test.php via database host/user input. Publicly documented impact is XSS vulnerability in Roundcube 1.3.x/LTS releases, with openSUSE advisories noting a fix by upgrading to Roundcube 1.3.16 (security update openSUSE-SU-2021:1...
CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
Roundcube Webmail 跨站脚本漏洞
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in Roundcube Mail, which originates from the smtp configuration in /installer/test.php. No details of the...
Roundcube Webmail 跨站脚本漏洞
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. Roundcube Webmail suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in Roundcube mail. No detai...
The vulnerability of the linkref_addindex function in the rcube_string_replacer.php component of the Roundcube webmail client allows a attacker to compromise the integrity of data, due to deficiencies in the security measures used to protect web page structures.
The vulnerability of the linkrefaddindex function in the Roundcube email client’s rcubestringreplacer.php component is related to the lack of content validation for links. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
[SECURITY] Fedora 32 Update: roundcubemail-1.4.11-1.fc32
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Fedora 33 : roundcubemail (2021-434b65378a)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-434b65378a advisory. - Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering. CVE-2021-26925 Note that...
Cross-site Scripting (XSS)
roundcube is vulnerable to cross-site scripting XSS. The vulnerability exists through specific CSS token sequences during HTML email rendering which allows an attacker to inject and execute arbitrary javascript...
CVE-2021-26925
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering...