Lucene search
K

75 matches found

NVD
NVD
added 2007/10/09 6:17 p.m.15 views

CVE-2007-5290

Multiple cross-site scripting XSS vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the 1 mode parameter ...

4.3CVSS6AI score0.03816EPSS
Exploits0References8
Prion
Prion
added 2007/10/09 6:17 p.m.14 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the 1 mode parameter ...

4.3CVSS6.3AI score0.03816EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2007/10/09 6:0 p.m.18 views

CVE-2007-5290

Multiple cross-site scripting XSS vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the 1 mode parameter ...

6AI score0.03816EPSS
Exploits0References8
CVE
CVE
added 2007/10/09 6:0 p.m.46 views

CVE-2007-5290

CVE-2007-5290 describes multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier, and possibly MailBee WebMail Pro ASP before 3.4.64, plus WebMail Lite ASP before 4.0.11 and WebMail Lite PHP before 4.0.22. The issues allow remote attackers to inject arbitrary web...

4.3CVSS6AI score0.03816EPSS
Exploits0References8Affected Software1
Packet Storm
Packet Storm
added 2007/10/06 12:0 a.m.26 views

MailBeeWebMailPro.txt

+===========================================================================+ + MailBee WebMail Pro =3.4 XSS Multiple Remote Vulnerabilities + +===========================================================================+ Authors: Ivan Sanchez & Maximiliano Soler Product: MailBee WebMail Pro 3.4...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2007/10/05 12:0 a.m.22 views

AfterLogic MailBee WebMail Pro 3.x - login.php?mode Cross-Site Scripting

AfterLogic MailBee WebMail Pro 3.x - login.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

6.8AI score
Exploits0
exploitpack
exploitpack
added 2007/10/05 12:0 a.m.14 views

AfterLogic MailBee WebMail Pro 3.x - default.asp?mode2 Cross-Site Scripting

AfterLogic MailBee WebMail Pro 3.x - default.asp?mode2 Cross-Site Scripting source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker ca...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2007/10/05 12:0 a.m.22 views

AfterLogic MailBee WebMail Pro 3.x - 'default.asp?mode2' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2007/10/05 12:0 a.m.20 views

AfterLogic MailBee WebMail Pro 3.x - 'login.php?mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

7.4AI score
Exploits0
NVD
NVD
added 2007/04/18 3:19 a.m.20 views

CVE-2007-2061

Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

4.3CVSS5.7AI score0.01995EPSS
Exploits1References8
Prion
Prion
added 2007/04/18 3:19 a.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

4.3CVSS6.1AI score0.01995EPSS
Exploits1References8Affected Software1
CVE
CVE
added 2007/04/18 2:20 a.m.51 views

CVE-2007-2061

The CVE-2007-2061 entry documents a Cross-site scripting (XSS) vulnerability in AfterLogic MailBee WebMail Pro 3.4, exploitable via the username parameter in check_login.asp. The affected component is a webmail login page; the underlying issue is reflected XSS allowing a remote attacker to inject...

4.3CVSS5.7AI score0.01995EPSS
Exploits1References8Affected Software1
securityvulns
securityvulns
added 2007/04/13 12:0 a.m.55 views

[MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue

MajorSecurity Advisory 44MailBee WebMail Pro - Cross Site Scripting Issue Details ======= Product: MailBee WebMail Pro 3.4 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.afterlogic.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Davi...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2007/04/13 12:0 a.m.18 views

MailBee WebMail Pro 3.4 - Check_login.asp Cross-Site Scripting

MailBee WebMail Pro 3.4 - Checklogin.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/23481/info MailBee WebMail Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2007/04/13 12:0 a.m.33 views

MailBee WebMail Pro 3.4 - 'Check_login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23481/info MailBee WebMail Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

7AI score
Exploits0
Rows per page
Query Builder