EUVD-2015-0918

Malware in sbrugna...

EUVD-2015-0919

Malware in sbrugna...

TransmitMail 跨站脚本漏洞

TransmitMail is a Php-based mail form system from the Japanese individual developer Tagawa Takao. TransmitMail suffers from a cross-site scripting vulnerability that originates from a software input validation error when processing a directory traversal sequence. A remote attacker could use this...

CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

Directory traversal

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

CVE-2015-0910

CVE-2015-0910 affects TAGAWA Takao TransmitMail (PHP-based mail form). The vulnerability is a cross-site scripting (CWE-79) flaw in the handling of file names, allowing an attacker to cause arbitrary script execution in a victim’s browser. Affected versions are 1.0.11 through 1.5.8. Root cause: p...

CVE-2015-0910

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...

CVE-2015-0911

CVE-2015-0911 affects TransmitMail (PHP-based mail form) versions 1.0.11 through 1.5.8. The root cause is an issue in processing file names that enables a directory traversal (CWE-22) vulnerability, allowing a remote attacker to read arbitrary files on the server via attachment handling vectors. ...

CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

TAGAWA Takao TransmitMail Path Traversal Information Disclosure Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. A directory traversal vulnerability exists in TAGAWA Takao TransmitMail, which can be exploited by a remote attacker to submit a special directory traversal request to read arbitrary files...

PT-2015-4961

Name of the Vulnerable Software and Affected Versions TAGAWA Takao TransmitMail versions 1.0.11 through 1.5.8 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename, which can lead to cross-site scripting XSS attacks. Recommendations For versio...

PT-2015-4962

Name of the Vulnerable Software and Affected Versions TAGAWA Takao TransmitMail versions 1.0.11 through 1.5.8 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability related to attachment handling. Recommendations For versions 1.0.11 throug...

CVE-2015-0910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...

CVE-2015-0911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...