AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

AfterLogic WebMail Pro 4.7.10 Cross Site Scripting

Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

AfterLogic WebMail Pro 4.7.10 xss

Exploit for unknown platform in category web applications ================================= AfterLogic WebMail Pro 4.7.10 xss ================================= Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to...

AfterLogic WebMail Pro 4.7.10 xss

No description provided by source. Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote fro...

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview...

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting

Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...

Cross site scripting

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

CVE-2008-5734

IceWarp Merak Mail Server Web Mail (IceWarp Merak Mail Server 9.3.2) is affected by CVE-2008-5734: an XSS flaw where an IMG tag in HTML emails is not sanitized, allowing a remote attacker to inject arbitrary script/HTML into a user’s browser. Root cause: improper sanitization of IMG HTML tag inpu...

CVE-2008-5734

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

MailBee WebMail Pro 'download_view_attachment.aspx'本地文件包含漏洞

MailBee WebMail Pro是一款基于ASPX的WEB应用程序。 MailBee WebMail Pro不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'downloadviewattachment.aspx'脚本对用户提交的'tempfilename'参数处理缺少充分过滤，提交多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容. AfterLogic MailBee WebMail Pro 厂商解决方案 目前没有解决方案提供： http://www.afterlogic.com/...

Directory traversal

Directory traversal vulnerability in downloadviewattachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. dot dot in the tempfilename parameter...

CVE-2008-0333

Directory traversal vulnerability in downloadviewattachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. dot dot in the tempfilename parameter...

CVE-2008-0333

The CVE-2008-0333 issue concerns AfterLogic MailBee WebMail Pro for ASP.NET (version 4.1) where a directory traversal flaw in download_view_attachment.aspx allows reading arbitrary files via .. in the temp_filename parameter. Root cause: unvalidated input in the downloadViewAttachment endpoint en...

mailbee-rfd.txt

homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=-...

MailBee WebMail Pro 4.1 (ASP.NET) Remote File Disclosure Vulnerability

No description provided by source. homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=-...

PT-2008-1966 · Afterlogic +1 · Afterlogic Mailbee Webmail Pro +1

Name of the Vulnerable Software and Affected Versions: AfterLogic MailBee WebMail Pro version 4.1 for ASP.NET Description: The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the download view attachment.aspx file. This is achieved by using a...

MailBee WebMail Pro 4.1 (ASP.NET) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== MailBee WebMail Pro 4.1 ASP.NET Remote File Disclosure Vulnerability ====================================================================== homepage: www.afterlogic.com...

MailBee WebMail Pro 4.1 - Remote File Disclosure

MailBee WebMail Pro 4.1 - Remote File Disclosure homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=- milw0rm.com 2008-01-16...

MailBee WebMail Pro 4.1 - Remote File Disclosure

homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=- milw0rm.com 2008-01-16...