Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability

The remote webmail server is affected by a cross-site scripting flaw. The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a...

Multiple Vulnerabilities in Merak Webmail / IceWarp Web Mail

The target is running at least one instance of Merak Webmail / IceWarp Web Mail 5.2.7 or less or Merak Mail Server 7.5.2 or less - . This product is subject to multiple XSS, HTML and SQL injection, and PHP source code disclosure vulnerabilities. OpenVAS Vulnerability Test $Id:...

Open WebMail userstat.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on the target using the privileges under which the web server operates. For further...

BasiliX Detection

The remote web server contains a webmail application written in PHP. Description : This script detects whether the remote host is running BasiliX and extracts version numbers and locations of any instances found. BasiliX is a webmail application based on PHP and IMAP and powered by MySQL. OpenVAS...

IMP Detection

This script detects whether the remote host is running IMP and extracts version numbers and locations of any instances found. IMP is a PHP-based webmail package from The Horde Project that provides access to mail accounts via POP3 or IMAP. See http://www.horde.org/imp/ for more information. OpenV...

BasiliX Detection (HTTP)

HTTP based detection of BasiliX. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14308";...

Horde IMP Detection

This script detects whether the remote host is running Horde IMP and extracts version numbers and locations of any instances found. IMP is a PHP-based webmail package from The Horde Project that provides access to mail accounts via POP3 or IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some...

Open WebMail Content-Type XSS

The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted...

Open WebMail vacation.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Basilix Webmail Dummy Request Vulnerability

The script SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:basilix:basilixwebmail"; ifdescription...

SquirrelMail < 1.4.4 XSS Vulnerabilities

The target is running at least one instance of SquirrelMail whose version number suggests it is vulnerable to one or more cross-site scripting vulnerabilities : - Insufficient escaping of integer variables in webmail.php allows a remote attacker to include HTML / script into a SquirrelMail webpag...

Open WebMail vacation.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on a target using the privileges under which the web server operates. For further...

Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability

The remote webmail server is affected by a cross-site scripting flaw. Description : The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script cod...

Open WebMail userstat.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Rockliffe.txt

======================================================================== = Multiple vulnerabilities within RockLiffe MailSite Express WebMail = = Also available online at = http://www.security-assessment.com/Advisories/RockliffeExpressWebmailVuln erabilities.pdf = = Vendor Website: =...

[Full-disclosure] Multiple vulnerabilities within RockLiffe MailSite Express WebMail

======================================================================== = Multiple vulnerabilities within RockLiffe MailSite Express WebMail = = Also available online at = http://www.security-assessment.com/Advisories/RockliffeExpressWebmailVuln erabilities.pdf = = Vendor Website: =...

CVE-2004-2537

Technical details (affected product/version, root cause, exploit methods) are not provided in the supplied documents. Monitor for updates.

CVE-2004-2495

The 1 Webmail, 2 admin, and 3 SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service CPU consumption via a large number of simultaneous connections to the service...

CVE-2004-2537

Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."...

CVE-2004-2495

The CVE-2004-2495 entry affects Ability Mail Server 1.18, specifically the Webmail, Admin, and SMTP services. The vulnerability allows remote attackers to trigger a denial-of-service via a large number of simultaneous connections, resulting in high CPU usage. The available documents confirm the i...