MailBeeWebMailPro.txt

+===========================================================================+ + MailBee WebMail Pro =3.4 XSS Multiple Remote Vulnerabilities + +===========================================================================+ Authors: Ivan Sanchez & Maximiliano Soler Product: MailBee WebMail Pro 3.4...

AfterLogic MailBee WebMail Pro 3.x - login.php?mode Cross-Site Scripting

AfterLogic MailBee WebMail Pro 3.x - login.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

AfterLogic MailBee WebMail Pro 3.x - 'default.asp?mode2' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

AfterLogic MailBee WebMail Pro 3.x - 'login.php?mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

uebimiau27x-xss.txt

Hi Packet Storm; I want to report a vulnerability of type XSS in a Webmail, this is UebiMiau. Thank you. +===================================================================+ + UebiMiau Null Code Services=" EXAMPLE on line: ------------------...

AfterLogic MailBee WebMail Pro 3.x - default.asp?mode2 Cross-Site Scripting

AfterLogic MailBee WebMail Pro 3.x - default.asp?mode2 Cross-Site Scripting source: https://www.securityfocus.com/bid/25942/info MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker ca...

Uebimiau Webmail 2.7.x - index.php Cross-Site Scripting

Uebimiau Webmail 2.7.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25912/info UebiMiau is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-si...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...

CVE-2007-5046

Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...

CVE-2007-5046

Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...

CVE-2007-5046

CVE-2007-5046 describes a cross-site scripting (XSS) flaw in the Webmail interface of IceWarp Merak Mail Server prior to 9.0.0. The vulnerability allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an element attribute within an email message body, demonstrated by an o...

IceWarp Merak Mail Server < 9.0.0 BODY Element XSS

The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host fails to properly sanitize email messages before displaying them. If a user reads a specially crafted message, a remote...

Unfixed XSS vulnerability at www.webmail.cercpower.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.webmail.cercpower.de, which at the time of submission ranked 6316292 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Open Webmail OWM 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchtype, 2 longpage, and 3 page parameters to a openwebmail-main.pl; the 4 prefscaller, 5 userfirsttime, 6 page, 7 sort, 8...

CVE-2007-4172

Multiple cross-site scripting XSS vulnerabilities in Open Webmail OWM 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchtype, 2 longpage, and 3 page parameters to a openwebmail-main.pl; the 4 prefscaller, 5 userfirsttime, 6 page, 7 sort, 8...

CVE-2007-4172

Multiple cross-site scripting XSS vulnerabilities in Open Webmail OWM 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchtype, 2 longpage, and 3 page parameters to a openwebmail-main.pl; the 4 prefscaller, 5 userfirsttime, 6 page, 7 sort, 8...

CVE-2007-4172

Open WebMail (OWM) 2.52 20060831 and earlier contains multiple cross-site scripting (XSS) vulnerabilities. The issue affects the following scripts and parameters: openwebmail-main.pl (searchtype, longpage, page); openwebmail-prefs.pl (prefs_caller, userfirsttime, page, sort, folder, message_id); ...

iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime&#40;&#41; Command Injection Vulnerability

SquirrelMail G/PGP Plugin gpgchecksignpgpmime Command Injection Vulnerability iDefense Security Advisory 07.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 11, 2007 I. BACKGROUND The SquirrelMail G/PGP Encrpytion Plugin is a general purpose encryption, decryption, and digital...

squirrel-exec.txt

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_help.php Local File Inclusion Vulnerability

SquirrelMail G/PGP Plugin gpgchecksignpgpmime Command Injection Vulnerability iDefense Security Advisory 07.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 11, 2007 I. BACKGROUND The SquirrelMail G/PGP Encrpytion Plugin is a general purpose encryption, decryption, and digital...