CVE-2023-48104

Alinto SOGo prior to 5.9.1 is vulnerable to an HTML Injection issue (CVE-2023-48104). Affected product: SOGo; vulnerable component/behavior is HTML injection in the web interface. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, no privileges required, user interaction required, scop...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

SOGo Security Breach

SOGo is a very fast and scalable modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in SOGo version 5.8.0, which stems from an HTML injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

Exploit for Cross-site Scripting in Alinto Sogo

CVE-2023-48104 HTML Injection in Alinto/SOGo Web Client Ve...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

DEBIAN-CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

UBUNTU-CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

Cross site scripting

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

SOGo 跨站脚本漏洞

SOGo is a very fast and scalable modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A cross-site scripting vulnerability exists in SOGo versions prior to 4.3.1, which originated from ...

CVE-2020-22402

CVE-2020-22402 concerns a Cross Site Scripting (XSS) vulnerability in SOGo Web Mail prior to version 4.3.1 . The issue allows an attacker to obtain user‑sensitive information when a user opens an email containing malicious code. The underlying flaw is an XSS in the web mail interface, enabling da...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

PT-2023-11617 · Unknown · Sogo Web Mail

Name of the Vulnerable Software and Affected Versions: SOGo Web Mail versions prior to 4.3.1 Description: The issue allows attackers to obtain user sensitive information when a user reads an email containing malicious code. This is due to a Cross Site Scripting XSS vulnerability. Recommendations:...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...