RoundCube Webmail Multiple Vulerabilities

Exploit for unknown platform in category web applications ========================================= RoundCube Webmail Multiple Vulerabilities ========================================= Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl...

Roundcube Webmail - Multiple Vulnerabilities

Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl Software Link: Software link : http://roundcube.net/download Version: 0.2.X , | possible voulerability in higher versions. Tested on: Code : XSS:...

Roundcube Webmail - Multiple Vulnerabilities

Roundcube Webmail - Multiple Vulnerabilities Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl Software Link: Software link : http://roundcube.net/download Version: 0.2.X , | possible voulerability in higher versions. Tested on: Code :...

Roundcube Webmail 0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Roundcube Webmail邮件消息HTML注入漏洞

BUGTRAQ ID: 33372 CVECAN ID: CVE-2009-0413 RoundCube Webmail是一个基于浏览器的IMAP客户端。 RoundCube Webmail没有正确地过滤HTML邮件消息的background属性，用户受骗查看了恶意邮件就会导致在浏览器会话中执行任意HTML和脚本代码。 RoundCube Webmail 0.2-stable 厂商补丁： RoundCube --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://trac.roundcube.net/changeset/2245...

DEBIAN-CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

DEBIAN-CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

CVE-2009-4076

CVE-2009-4076 is a CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier that could allow remote attackers to hijack a user’s authentication for requests that modify user information. Connected documents indicate a remediation: Fedora 10 security advisory MDVSA-2010:015 fixes CVE-2009-4076 (a...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

CVE-2009-4077

CVE-2009-4077 : Cross-site request forgery (CSRF) in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack authentication of unspecified users for requests that send arbitrary emails via unspecified vectors. The issue affects Roundcube Webmail up to version 0.2.2; Fedora advisorie...

CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...