Cross site scripting

Cross-site scripting XSS vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15511

Cross-site scripting XSS vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15511

CVE-2018-15511 – totemomail 6.0.0 build 570 suffers a cross-site scripting (XSS) vulnerability in the Notification template feature. The description confirms an attacker can inject arbitrary web script or HTML via this feature. Connected sources (NVD/NVD-derived records, PRION/CVE lists, and EUVD...

CVE-2018-15510

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15510

The vulnerability CVE-2018-15510 affects totemomail 6.0.0 build 570 in the Certificate feature, where an XSS flaw allows remote attackers to inject arbitrary web script or HTML. Documents indicate the issue is real but do not provide exploit details, affected versions beyond the specific build, i...

CVE-2018-15513

CVE-2018-15513 affects totemomail 6.0.0 build 570 where the log viewer API/feature enables access to session IDs of high-privilege users by abusing access granted to a read-only auditor role. The underlying cause is not detailed beyond this access path; the impact is exposure of sensitive session...

CVE-2018-15513

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role...

CVE-2018-15512

Cross-site scripting XSS vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15512

CVE-2018-15512 concerns a cross-site scripting (XSS) vulnerability in the Authorisation Service feature of totemomail version 6.0.0 build 570 . The issue allows remote attackers to inject arbitrary web script or HTML. Documented across multiple sources (NVD/CNVD/etc.) with the same description; n...

PT-2019-9119

Name of the Vulnerable Software and Affected Versions totemomail version 6.0.0 build 570 Description The log viewer in totemomail allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. Recommendations For totemomail version 6.0.0 build 570, restrict...

PT-2019-9116

Name of the Vulnerable Software and Affected Versions totemomail version 6.0.0 build 570 Description A cross-site scripting XSS issue exists in the 'Certificate' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the...

CVE-2018-15510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

PT-2019-9118

Name of the Vulnerable Software and Affected Versions totemomail version 6.0.0 build 570 Description A cross-site scripting XSS issue exists in the 'Authorisation Service' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized action...

CVE-2018-15513: Improper Access Control

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role...

CVE-2018-15511: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15512: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

PT-2019-9117

Name of the Vulnerable Software and Affected Versions totemomail version 6.0.0 build 570 Description A cross-site scripting XSS issue exists in the 'Notification template' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in totemomail Encryption Gateway before 6.0.0Build371 allow remote attackers to hijack the authentication of users for requests that 1 change user settings, 2 send emails, or 3 change contact information by leveraging lack of an anti-CSRF...

CVE-2018-6563

Multiple cross-site request forgery CSRF vulnerabilities in totemomail Encryption Gateway before 6.0.0Build371 allow remote attackers to hijack the authentication of users for requests that 1 change user settings, 2 send emails, or 3 change contact information by leveraging lack of an anti-CSRF...

CVE-2018-6563

Multiple cross-site request forgery CSRF vulnerabilities in totemomail Encryption Gateway before 6.0.0Build371 allow remote attackers to hijack the authentication of users for requests that 1 change user settings, 2 send emails, or 3 change contact information by leveraging lack of an anti-CSRF...