273 matches found
Uebimiau Web-Mail 2.7.102.7.2 - Remote File Disclosure
Uebimiau Web-Mail 2.7.102.7.2 - Remote File Disclosure ---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //...
Uebimiau Web-Mail 2.7.10/2.7.2 Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications =================================================================== Uebimiau Web-Mail 2.7.10/2.7.2 Remote File Disclosure Vulnerability =================================================================== ---- Uebimiau Web-Mail Remote File...
Uebimiau Web-Mail 2.7.10/2.7.2 - Remote File Disclosure
---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \...
CVE-2003-1522
PSCS VPOP3 Web Mail server versions 2.0e and 2.0f are affected by a cross-site scripting (XSS) vulnerability in the redirect parameter passed to admin/index.html. The issue allows remote attackers to inject arbitrary web script or HTML. The public descriptions consistently identify the affected p...
CVE-2003-1522
Cross-site scripting XSS vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page...
[Full-disclosure] CommuniGate Pro web mail persistent cross-site scripting vulnerability
1 Summary Affected software: Stalker CommuniGate Pro version 5.1.8 and below Vendor URL: www.stalker.com Severity: Medium 2 Vulnerability Description CommuniGate Pro is a communication server supporting a large number of protocols. It includes a web mail system. The web mail system suffers from a...
Yahoo Messenger information leak
Web mail authentication response reply with session identifier is saved in browser cache...
C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...
MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF)
The Web Mail Client bundled with the version of MailEnable installed on the remote host reportedly fails to properly sanitize email messages and various script parameters of malicious script code, which can lead to cross-site scripting, cross-site request forgery, and script insertion attacks...
[Full-disclosure] Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities
====================================================================== Secunia Research 14/02/2007 - MailEnable Web Mail Client Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
FreeBSD : kronolith -- arbitrary local file inclusion vulnerability (a8af7d70-8007-11db-b280-0008743bf21a)
iDefense Labs reports : Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes...
kronolith -- arbitrary local file inclusion vulnerability
iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...
Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail service by "Walla! Communications LTD" Discovered Date: 05/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.walla.co.il/ Details: Walla! Communications LTD Web Mail servic...
Mirapoint Web Mail - Expression() HTML Injection
Mirapoint Web Mail - Expression HTML Injection source: https://www.securityfocus.com/bid/20840/info Mirapoint Web Mail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in th...
Mirapoint Web Mail - 'Expression()' HTML Injection
source: https://www.securityfocus.com/bid/20840/info Mirapoint Web Mail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...
MDaemon WorldClient form2raw.cgi From buffer overflow
Added: 09/18/2006 CVE: CVE-2003-1200 BID: 9317 OSVDB: 3255 Background MDaemon is an e-mail server product for Windows. It includes a web mail component called WorldClient. Problem A buffer overflow in MDaemon WorldClient allows remote command execution by sending a web request for the form2raw.cg...
IceWarp < 5.6.1 lang_settings Parameter Remote File Inclusion (deprecated)
Binary data 3688.prm...
CVE-2006-0817
CVE-2006-0817 is a directory traversal/remote file inclusion vulnerability in IceWarp Web Mail bundled with Merak/VisNetic Mail Server. The flaw stems from improper sanitization in the language/lang_settings parameters via the securepath function in accounts/inc/include.php and admin/inc/include....
horde_help_module.pm.txt
Title: Horde package Msf::Exploit::hordehelpmodule; use base "Msf::Exploit"; use strict; use Pex::Text; use bytes; my $advanced = ; my $info = 'Name' = 'Horde help viewer module remote PHP code execution', 'Version' = '$Revision: 1.0 $', 'Authors' = 'inkubus ' , 'Arch' = , 'OS' = , 'Priv' = 0,...