[Full-disclosure] [vuln.sg] Neon WebMail for Java Multiple Vulnerabilities

vuln.sg Vulnerability Research Advisory Neon WebMail for Java Multiple Vulnerabilities by Tan Chew Keong Release Date: 2006-09-20 Summary ------- 7 vulnerabilities have been found in Neon WebMail for Java. When exploited, these vulnerabilities allow executing of arbitrary JSP code, escalation of...

NeoSys Neon Webmail for Java 5.065.07 - updateuser?in_name Servlet Cross-Site Scripting

NeoSys Neon Webmail for Java 5.065.07 - updateuser?inname Servlet Cross-Site Scripting...

NeoSys Neon Webmail for Java 5.065.07 - maillist Servlet Multiple SQL Injections

NeoSys Neon Webmail for Java 5.065.07 - maillist Servlet Multiple SQL Injections source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-uplo...

NeoSys Neon Webmail for Java 5.06/5.07 - 'updateuser?in_name' Servlet Cross-Site Scripting

source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...

NeoSys Neon Webmail for Java 5.06/5.07 - 'downloadfile' Servlet Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...

hotmailmsnxss.txt

Hotmail/MSN Cross Site Scripting Exploit Author: Simo64 Contact: simo64atmorxdotorg Discovered: 07/25/2006 Published: 08/10/2006 Vendor: MSN.com Service: Hotmail.com Webmail Service Vulnerability: Cross Site Scripting Cookie-Theft Severity: Medium/High Tested on: IE 6.0 designed for firefox 1.5 a...

SquirrelMail compose.php session_expired_post Arbitrary Variable Overwriting

The installed version of SquirrelMail allows for restoring expired sessions in an unsafe manner. Using a specially crafted expired session and compose.php, a user can leverage this issue to take control of arbitrary variables used by the affected application, which can lead to other attacks again...

SquirrelMail WebMail unauthorized access

By changing internal compose.php variables it's possible to access files of settings of different users...

IceWarp Multiple Script Remote File Inclusion

The remote host is running IceWarp Web Mail, a webmail product written in PHP that is distributed as a standalone application and is also bundled with VisNetic Mail Server and Merak Mail Server. The version of IceWarp Web Mail installed on the remote host fails to sanitize user-supplied input to...

CentOS 3 / 4 : squirrelmail (CESA-2006:0547)

An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...

RHEL 3 / 4 : squirrelmail (RHSA-2006:0547)

An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2006:0547 An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package writt...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...

CVE-2006-3305

Multiple cross-site scripting XSS vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 fuser parameter in index.php, the 2 pag parameter in messages.php, or the 3 lid, 4 tid, and 5 sid parameters in error.php...

CVE-2006-3297

Cross-site scripting XSS vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the icq parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-3305

CVE-2006-3305 affects UebiMiau Webmail versions 2.7.10, 2.7.2 and earlier, with multiple XSS via parameters f_user (index.php), pag (messages.php), and lid, tid, sid (error.php). The vulnerability allows remote injection of arbitrary script/HTML. The connected documents do not provide exploit det...

CVE-2006-3297

CVE-2006-3297 is an XSS vulnerability in UebiMiau Webmail’s error.php (versions 2.7.10 and earlier). The icq parameter can be injected to execute arbitrary web script/HTML in the victim’s browser. Root cause is insufficient input sanitization in error.php. Impact per sources is a remote attacker ...

CVE-2006-3305

Multiple cross-site scripting XSS vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 fuser parameter in index.php, the 2 pag parameter in messages.php, or the 3 lid, 4 tid, and 5 sid parameters in error.php...

CVE-2006-3297

Cross-site scripting XSS vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the icq parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

IE_ONE_MINOR_ONE_MAJOR

REPORT NAME: PLEBO-2006.06.16-IEONEMINORONEMAJOR DESTINATION: To Publish EMAIL RECPT: bugtraq CONTENTS 0. IMPORTANT NOTICE 1. SUMMARY 2. READ CONTENT OF ANY DOMAIN - PROOF OF CONCEPT 3. READ CONTENT OF ANY DOMAIN - TIPS FOR MATURE EXPLOIT 4. DOUBLE-CLICK ANYWHERE ON WEB PAGE COULD ALLOW REMOTE CO...