CVE-2022-21193: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors...

PT-2022-15273

Name of the Vulnerable Software and Affected Versions TransmitMail versions 2.5.0 through 2.6.1 Description A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For TransmitMail versions 2.5.0 through 2.6.1,...

PT-2022-14914

Name of the Vulnerable Software and Affected Versions TransmitMail versions 2.5.0 through 2.6.1 Description The issue allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors. This is a directory traversal vulnerability. Recommendations For...

CVE-2022-22146: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

JVN#70100915: Multiple vulnerabilities in TransmitMail

TransmitMail is a PHP based mail form system. TransmitMail contains multiple vulnerabilities listed below. Directory traversal vulnerability due to the improper validation of external input values CWE-22 - CVE-2022-22146 Version| Vector| Score ---|---|--- CVSS v3|...

TransmitMail 路径遍历漏洞

TransmitMail is a Php-based email form system developed by Tagawa Takao, a Japanese individual developer. TransmitMail suffers from a path traversal vulnerability that stems from insufficient processing of user-supplied data. A remote attacker could trick a victim into following a specially craft...

TransmitMail 跨站脚本漏洞

TransmitMail is a Php-based mail form system from the Japanese individual developer Tagawa Takao. TransmitMail suffers from a cross-site scripting vulnerability that originates from a software input validation error when processing a directory traversal sequence. A remote attacker could use this...

CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

Directory traversal

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

Cross site scripting

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...

CVE-2015-0910

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...

CVE-2015-0910

CVE-2015-0910 affects TAGAWA Takao TransmitMail (PHP-based mail form). The vulnerability is a cross-site scripting (CWE-79) flaw in the handling of file names, allowing an attacker to cause arbitrary script execution in a victim’s browser. Affected versions are 1.0.11 through 1.5.8. Root cause: p...

CVE-2015-0911

CVE-2015-0911 affects TransmitMail (PHP-based mail form) versions 1.0.11 through 1.5.8. The root cause is an issue in processing file names that enables a directory traversal (CWE-22) vulnerability, allowing a remote attacker to read arbitrary files on the server via attachment handling vectors. ...

CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

CVE-2015-0910

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...

PT-2015-4962

Name of the Vulnerable Software and Affected Versions TAGAWA Takao TransmitMail versions 1.0.11 through 1.5.8 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability related to attachment handling. Recommendations For versions 1.0.11 throug...

CVE-2015-0911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...

PT-2015-4961

Name of the Vulnerable Software and Affected Versions TAGAWA Takao TransmitMail versions 1.0.11 through 1.5.8 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename, which can lead to cross-site scripting XSS attacks. Recommendations For versio...