Lucene search
+L

4295 matches found

zdt
zdt
added 2009/08/24 12:0 a.m.48 views

Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln

Exploit for unknown platform in category web applications ============================================================= Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln ============================================================= +Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type ...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/08/24 12:0 a.m.31 views

Uebimiau Webmail 3.2.0-2.0 Database Disclosure

+Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note : Tüm Müslüman Camiasına Hayırlı Ramazanlar Dilerim...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2009/08/20 9:4 p.m.12 views

[SECURITY] Fedora 11 Update: squirrelmail-1.4.19-2.fc11

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

1.2AI score
SaveExploits0
Fedora
Fedora
added 2009/08/20 8:59 p.m.34 views

[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-2.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

6.8CVSS1.2AI score0.03399EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2009/08/11 12:0 a.m.30 views

Kerio MailServer WebMail 'Integration' Page XSS Vulnerability

The host is running Kerio MailServer and is prone to Cross-Site Scripting vulnerability OpenVAS Vulnerability Test $Id: gbkeriomailserverxssvulnaug09.nasl 4869 2016-12-29 11:01:45Z teissa $ Kerio MailServer WebMail 'Integration' Page XSS Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

4.3CVSS6.3AI score0.01065EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2009/08/11 12:0 a.m.22 views

Kerio MailServer WebMail 'Integration' Page XSS Vulnerability

Kerio MailServer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS5.7AI score0.01065EPSS
SaveExploits0References4
seebug.org
seebug.org
added 2009/08/06 12:0 a.m.54 views

CommuniGate Pro WebMail URI解析HTML注入漏洞

BUGTRAQ: 35783 Communigate Pro邮件服务器存在存储式跨站脚本漏洞。如果远程攻击者提交了包含有特制URL的纯文本邮件消息的话,就会在用户阅读邮件时执行嵌入的JavaScript代码。成功利用这个漏洞的攻击者可以窃取敏感信息或执行HTML或脚本代码。 Communigate Pro 5.2.14 厂商补丁: Stalker ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.communigate.com/cgatepro/History52.html...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/07/29 12:0 a.m.25 views

CommuniGate Pro WebMail < 5.2.15 XSS

According to its banner, the remote web server is from a version of CommuniGate Pro older than 5.2.15. The webmail component of such versions fails to correctly parse plaintext email messages containing malicious URL links before displaying the message to the user. By sending a specially crafted...

5.7AI score
SaveExploits0References3
NVD
NVD
added 2009/07/28 7:30 p.m.26 views

CVE-2009-2636

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

4.3CVSS5.6AI score0.01065EPSS
SaveExploits0References5
Prion
Prion
added 2009/07/28 7:30 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

4.3CVSS6.1AI score0.01065EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2009/07/28 7:6 p.m.73 views

CVE-2009-2636

Kerio MailServer WebMail usion page vulnerability CVE-2009-2636 is a cross-site scripting (XSS) flaw in the WebMail integration page. Affects Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0. Exploitation allows an attacker to inject arbitrary web script or HTML via an e-mail message, with impact...

4.3CVSS5.8AI score0.01065EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2009/07/28 7:6 p.m.30 views

CVE-2009-2636

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

5.6AI score0.01065EPSS
SaveExploits0References5
securityvulns
securityvulns
added 2009/07/24 12:0 a.m.53 views

Stored XSS on Communigate Pro 5.2.14 and prior versions

Description The Communigate Pro webmail framework is prone to a stored Cross Site Scripting vulnerability through crafted plain text email messages. - Affected version: 5.2.14 and prior as reported from Communigate: http://www.communigate.com/cgatepro/History52.html - Details This vulnerability...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/07/23 12:0 a.m.46 views

Communigate Pro Cross Site Scripting

Description The Communigate Pro webmail framework is prone to a stored Cross Site Scripting vulnerability through crafted plain text email messages. - Affected version: 5.2.14 and prior as reported from Communigate: http://www.communigate.com/cgatepro/History52.html - Details This vulnerability...

SaveExploits0
myhack58
myhack58
added 2009/07/22 12:0 a.m.18 views

The latest remote file code execution exploit method-vulnerability warning-the black bar safety net

about them on the Internet search Uebimiau Webmail Address followed by /uebimiau/admin/editor. php? load=config is the person holding the encryption /uebimiau/index. php? cmd=id All is Foreign,,, master can play。。。。。。。 Vulnerability published Time 2 0 0 9 to 6. 1 2...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/07/03 12:0 a.m.43 views

V-webmail Multiple PHP Remote File Inclusion Vulnerability

V-webmail is prone to Multiple PHP Remote File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2009/07/03 12:0 a.m.39 views

V-webmail Multiple PHP Remote File Inclusion Vulnerability

The host is running V-webmail and is prone to Multiple PHP Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbv-webmailmultfileincvuln.nasl 4906 2017-01-02 13:06:55Z teissa $ V-webmail Multiple PHP Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c...

7.5CVSS0.5AI score0.03564EPSS
SaveExploits16References3
OpenVAS
OpenVAS
added 2009/07/03 12:0 a.m.16 views

V-webmail Version Detection

This script detects the installed version of V-webmail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
NVD
NVD
added 2009/07/01 1:0 p.m.29 views

CVE-2008-6840

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

6.8CVSS7.5AI score0.01936EPSS
SaveExploits14References3
Prion
Prion
added 2009/07/01 1:0 p.m.23 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

6.8CVSS7.8AI score0.03564EPSS
SaveExploits16References3Affected Software1
Rows per page
Query Builder