4335 matches found
Kerio Mailserver 5.6.3 list Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
SurgeMail and WebMail <= 3.0 - 'Page' Command Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27990/info SurgeMail and WebMail are prone to a remote format-string vulnerability because the applications fail to properly sanitize user-supplied input before including it in the format-specifier argument of a...
NOCC 1.0 no_mail.php html_no_mail Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject...
Trlinux Postaci Webmail 1.1.3 Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database. Webmail stores...
T-dah Webmail Multiple Stored XSS
No description provided by source. !/usr/bin/python ''' Exploit Title: T-dah Webmail Multiple Stored XSS issues. Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://tdah.us/ Software Link:...
NetWin SurgeMail 1.8/1.9/2.0,WebMail 3.1 Login Form XSS
No description provided by source. source: http://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site...
Yet Another NOCC <= 0.1.0 - Local File Inclusion Vulnerability
No description provided by source. Yet Another NOCC 0.1.0 = Local File Inclusion Vulnerabilities YANOCC is a simple and fast webmail client which can handle POP3, SMTP, and IMAP servers. YANOCC is based on NOCC's code and is written with PHP4. It features multi-language support, MIME attachments,...
Popper Webmail 1.41 ChildWindow.Inc.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13851/info Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
software602 602pro lan suite 2003 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8701/info A problem with the handling of directory traversal requests has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information...
Madirish Webmail 2.01 (basedir) RFI/LFI Vulnerability
No description provided by source. ===================================================== Madirish Webmail 2.01 basedir RFI/LFI Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...
V-webmail 1.6.4 includes/pear/XML/Tree.php CONFIG[pear_dir] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...
Horde IMP Webmail <= 4.0.4 Client Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22975/info Horde IMP Webmail Client is prone to multiple input-validation vulnerabilities, including cross-site scripting and an HTML-injection issue, because the application fails to properly sanitize user-supplied input...
cobalt qube webmail 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2987/info Cobalt Qube is an fully-featured network server appliance. It includes pre-installed tools and applications and can be put online with very little configuration. A vulnerability in Cobalt Qube's webmail...
NeoSys Neon Webmail for Java 5.06/5.07 updatemail Servlet Arbitrary Mail Message Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an...
Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28898/info Horde Webmail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the...
Outblaze Webmail 0 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10756/info Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content. An attacker may be able to inject HTML and script code...
V-webmail 1.6.4 includes/pear/Log.php CONFIG[pear_dir] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...
VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability
No description provided by source...
Magic Winmail Server 4.0 (Build 1112) upload.php Traversal Arbitrary File Upload
No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...
Kerio Mailserver 5.6.3 do_map Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...