4295 matches found
CVE-2006-3233
Cross-site scripting XSS vulnerability in openwebmail-read.pl in Open WebMail OWM 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields,...
CVE-2006-3233
Cross-site scripting XSS vulnerability in openwebmail-read.pl in Open WebMail OWM 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields,...
CVE-2006-3233
CVE-2006-3233 describes a cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52 and earlier builds released before 2006-06-18, specifically in the openwebmail-read.pl component. An attacker can inject arbitrary web script or HTML via the from field, enabling potential credential or ...
CVE-2006-3229
Cross-site scripting XSS vulnerability in Open WebMail OWM 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the 1 To and 2 From fields in openwebmail-main.pl, and possibly 3 other unspecified vectors related to "openwebmailerr...
CVE-2006-3229
Cross-site scripting XSS vulnerability in Open WebMail OWM 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the 1 To and 2 From fields in openwebmail-main.pl, and possibly 3 other unspecified vectors related to "openwebmailerr...
CVE-2006-3229
Open WebMail (OWM) 2.52 (and earlier builds released before 2006-05-12) is affected by a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via the To and From fields in openwebmail-main.pl, and possibly via other vectors related to ...
MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities
No description provided by source. Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMI...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2665
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2666
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2665
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2665
Vulnerability CVE-2006-2665 affects V-Webmail 1.3 via PHP remote file inclusion in includes/mailaccess/pop3/core.php. Attackers can include remote PHP via CONFIG[pear_dir], enabling arbitrary code execution. Affected: V-Webmail 1.3; vulnerability details and an associated exploit exist (e.g., exp...
CVE-2006-2666
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2666
V-Webmail versions 1.5–1.6.4 contain a PHP remote file inclusion flaw in includes/mailaccess/pop3.php. An attacker can pass a URL via CONFIG[pear_dir] to achieve remote PHP code execution on the affected server. This CVE (CVE-2006-2666) explicitly describes arbitrary code execution through that p...
V-Webmail 1.6.4 Remote File Include
Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford xbefordx gmail com Vulnerable File v-webmail/includes/pear//.php =...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
V-Webmail 1.6.4 - pear_dir Remote File Inclusion
V-Webmail 1.6.4 - peardir Remote File Inclusion Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford Vulnerable File...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
No description provided by source. Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford xbefordx gmail com Vulnerable File...
V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion
Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford Vulnerable File v-webmail/includes/pear//.php = requireonce...