AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

AfterLogic WebMail Pro 4.7.10 Cross Site Scripting

Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview...

AfterLogic WebMail Pro 4.7.10 xss

Exploit for unknown platform in category web applications ================================= AfterLogic WebMail Pro 4.7.10 xss ================================= Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to...

AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting

Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...

AfterLogic WebMail Pro 4.7.10 xss

No description provided by source. Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote fro...

Uebimiau Webmail Information Disclosure Vulnerability

This host is running Uebimiau Webmail and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpoduebimiauwebmailinfodiscvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Uebimiau Webmail Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Uebimiau Webmail Version Detection

This script finds the Uebimiau Webmail version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Uebimiau Webmail Information Disclosure Vulnerability

Uebimiau Webmail is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3199

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for systemadmin/admin.ucf...

Improper access control

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for systemadmin/admin.ucf...

CVE-2009-3199

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for systemadmin/admin.ucf...

CVE-2009-3199

Uebimiau Webmail Information Disclosure (CVE-2009-3199) affects Uebimiau Webmail 3.2.0-2.0. The vulnerability arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to download a database containing usernames and password hashes by direct...

CVE-2008-7219

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not valida...

CVE-2008-7219

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not valida...

CVE-2008-7219

CVE-2008-7219 affects Horde Kronolith H3 (2.1 up to before 2.1.7; 2.2 before 2.2-RC2), Nag H3 (2.1 before 2.1.4; 2.2 before 2.2-RC2), Mnemo H3 (2.1 before 2.1.2; 2.2 before 2.2-RC2), Groupware (1.0 before 1.0.3; 1.1 before 1.1-RC2) and Groupware Webmail Edition (1.0 before 1.0.4; 1.1 before 1.1-R...

SquirrelMail多个表单跨站请求伪造漏洞

CVECAN ID: CVE-2009-2964 SquirrelMail是一款PHP编写的WEBMAIL程序。 SquirrelMail没有正确地过滤用户向多个表单（发送消息、更改偏好等）所提交的内容，远程攻击者可以通过跨站请求伪造攻击执行删除邮件、发送邮件等操作。以下是受影响的页面： functions/mailboxdisplay.php src/addrbooksearchhtml.php src/addressbook.php src/compose.php src/folders.php src/folderscreate.php src/foldersdelete.php...

Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln

No description provided by source. +Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note : Tüm Müslüman Camiasına...

Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure

+Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note : Tüm Müslüman Camiasına Hayırlı Ramazanlar Dilerim...