44 matches found
EUVD-2007-5599
Malware in sbrugna...
EUVD-2012-4002
Malware in sbrugna...
EUVD-2012-4003
Malware in sbrugna...
EUVD-2006-2680
Malware in sbrugna...
EUVD-2007-5621
Malware in sbrugna...
Socketmail <= 2.2.6 (site_path) Remote File Include Vulnerability
No description provided by source. Title: Socketmail = 2.2.6 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: Creative Digital Resources URL: http://socketmail.com ----------------------------------------------------------------- Credit...
SocketMail 2.2.1 Lostpwd.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26138/info SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...
CVE-2012-4058
Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...
CVE-2012-4059
Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...
Cross site scripting
Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...
CVE-2012-4059
Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...
CVE-2012-4059
CVE-2012-4059 describes a CSRF vulnerability in SocketMail Pro 2.2.9 affecting the endpoint home/secretqtn.php where an attacker can hijack the authenticated user’s session to change security questions and answers via an upd action. The vulnerability arises from CSRF exposure that allows changing...
CVE-2012-4058
CVE-2012-4058 affects SocketMail Pro 2.2.9 and is a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML via the subject of an email. The referenced sources corroborate the description but do not provide additional exploitation details in the con...
PT-2012-5177
Name of the Vulnerable Software and Affected Versions SocketMail Pro version 2.2.9 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack user authentication for requests that modify security questions and answers. This is achieved via an upd action in the...
CVE-2012-4059: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...
PT-2012-5176
Name of the Vulnerable Software and Affected Versions SocketMail Pro version 2.2.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the subject of an email. This could potentially lead to unauthorized actions on the affected system...
CVE-2012-4058: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...
SocketMail Pro 2.2.9 Cross Site Request Forgery / Cross Site Scripting
Title:SocketMail Pro version 2.2.9 CSRF Cross Site Request Forgery && XSS Cross Site Scripting Author:MetaiZm Software:SocketMail Pro version 2.2.9 Website:http://socketmail.com/ Tested on:Windows XP SP3 Description : Subject xss codes inject and email send - Screen :...