webmail.bushinternet.com XSS vulnerability

Vulnerable URL: http://webmail.bushinternet.com/?fuser=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

webmail.amnesty.org.uk XSS vulnerability

Vulnerable URL: https://webmail.amnesty.org.uk/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

cali.co.uk XSS vulnerability

Vulnerable URL: http://www.cali.co.uk/webmail-login.asp?errmsg=" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2394385 VIP website status:| No Check...

[SECURITY] Fedora 24 Update: roundcubemail-1.1.5-1.fc24

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 22 Update: roundcubemail-1.1.5-1.fc22

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 23 Update: roundcubemail-1.1.5-1.fc23

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

RoundCube Webmail Cross-Site Request Forgery Vulnerability

RoundCube Webmail is a browser-based IMAP client mail client. A cross-site request forgery vulnerability exists in RoundCube Webmail, which can be exploited by an attacker to download message attachments by sending a GET request with the download parameter set to 1...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-02712)

RoundCube Webmail is a browser-based IMAP client mail client. A cross-site scripting vulnerability exists in RoundCube Webmail, which can be exploited by an attacker to inject arbitrary web script or HTML...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-02711)

RoundCube Webmail is a browser-based IMAP client mail client. A cross-site scripting vulnerability exists in RoundCube Webmail, which can be exploited to inject arbitrary web script or HTML with the help of specially crafted Svg image files...

PT-2017-8454

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.0.9 Roundcube Webmail versions 1.1.x prior to 1.1.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted SVG. Recommendations For versio...

PT-2016-5836

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.1.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that download attachments, potentially causing a denial of service due to disk...

Horde Groupware Cross-Site Scripting Vulnerability (CNVD-2016-02488)

Horde Groupware is email and communication solutions. A cross-site scripting vulnerability in Horde Groupware versions prior to 5.2.12 and Horde Groupware Webmail Edition versions prior to 5.2.12 allows remote attackers to inject arbitrary web script or HTML via numeric form fields...

DEBIAN-CVE-2015-8807

Cross-site scripting XSS vulnerability in the renderVarInputnumber function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors...

CVE-2015-8807

Cross-site scripting XSS vulnerability in the renderVarInputnumber function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors...

Debian DSA-3541-1 : roundcube - security update

High-Tech Bridge Security Research Lab discovered that Roundcube, a webmail client, contained a path traversal vulnerability. This flaw could be exploited by an attacker to access sensitive files on the server, or even execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

[SECURITY] [DSA 3541-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3541-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 05, 2016 https://www.debian.org/security/faq -...

DSA-3541-1 roundcube - security update

Bulletin has no description...

webmail.artnews.com.au Open Redirect vulnerability

Vulnerable URL: https://webmail.artnews.com.au/horde/util/go.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 30.03.2016 Latest check for patch:| 30.03.2016 19:14 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

hands.com.tw XSS vulnerability

Vulnerable URL: http://hands.com.tw/webmail-cgi/XwebMail?task=login&action=...

webmail.math.tku.edu.tw XSS vulnerability

Vulnerable URL: http://webmail.math.tku.edu.tw/webmail-cgi/XwebMail?task=login&action=%3C/title%3E%3C/script/%27-alert%280%29-%27%22-%22--%3E%3Cimg/onerror=%22;alert%28/XSSPOSED/%29;%22src=1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type...