SurgeMail <= 3.0c2 Multiple XSS

According to its banner, the remote host is running SurgeMail version 3.0c2 or earlier. These versions reportedly are prone to multiple cross-site scripting issues, which an attacker could exploit to inject arbitrary HTML and script code into a user's browser to be processed within the context of...

[SA15425] SurgeMail Unspecified Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

NetWin SurgeMail < 3.0.0c3 Multiple Unspecified Remote Vulnerabilities

Binary data 2921.prm...

CVE-2005-0845

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...

CVE-2005-0846

Multiple cross-site scripting XSS vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the 1 message subject or 2 message header field...

CVE-2005-0846

Multiple cross-site scripting XSS vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the 1 message subject or 2 message header field...

CVE-2005-0845

CVE-2005-0845 concerns SurgeMail 2.2g3, where a directory traversal in the Webmail interface, via the attach_id parameter, permits remote authenticated users to write arbitrary files or directories. The underlying issue is improper validation of the dot-dot (.. ) path segment, enabling access out...

CVE-2005-0845

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...

CVE-2005-0846

CVE-2005-0846 affects NetWin SurgeMail 2.2g3 and describes multiple XSS vulnerabilities in the email auto-reply message, exploitable via the (1) message subject or (2) message header field to inject arbitrary web script/HTML. Exploitation details are not provided beyond this, but a remediation is...

Surgemail crossite sripting

No description provided...

[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities

SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...

surgemail22g3.txt

SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...

NetWin SurgeMail < 3.0.0c2 Multiple Remote Unspecified Vulnerabilities

Binary data 2739.prm...

NetWin SurgeMail Multiple Remote Unspecified Vulnerabilities

The remote host is running NetWin SurgeMail, a mail server application. The remote version of this software is affected by multiple unspecified vulnerabilities that have been disclosed by the vendor. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid17594; scriptversio...

CVE-2004-2537

Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."...

CVE-2004-2547

NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to obtain sensitive information via HTTP requests that a specify the / URI, b specify the /scripts/ URI, or c specify a non-existent file, which reveal the path in an error message...

CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

SurgeMail < 3.9g2-2 IMAP Command Handling Unspecified DoS

Binary data 4555.prm...

NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Login Form Cross-Site Scripting

source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks. SurgeMail versions...

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry...