4294 matches found
GLSA-200506-19 : SquirrelMail: Several XSS vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200506-19 SquirrelMail: Several XSS vulnerabilities SquirrelMail is vulnerable to several cross-site scripting issues, most reported by Martijn Brinkers. Impact : By enticing a user to read a specially crafted e-mail or using a...
CVE-2002-1710
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file...
CVE-2002-1710
BasiliX Webmail 1.1.0 (or lower) contains an Arbitrary File Disclosure vulnerability in the attachment handling of Compose Mail. The PHP-based script accepts a list of attachment names from the client but does not verify that those attachments were actually uploaded, allowing an attacker to retri...
CVE-2002-1708
Cross-site scripting vulnerability XSS in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the 1 subject or 2 message fields...
CVE-2002-1709
CVE-2002-1709 describes a SQL injection vulnerability in BasiliX Webmail, where the vulnerable vector is the id parameter. The OpenVAS entries indicate that remote servers running BasiliX Webmail version 1.1.0 or lower are potentially vulnerable, with susceptibility depending on the installed PHP...
CVE-2002-1709
SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable...
CVE-2005-2022
Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting XSS vulnerability...
CVE-2002-1708
The OpenVAS/Nessus entries confirm CVE-2002-1708 as a cross-site scripting vulnerability in BasiliX Webmail, affecting version 1.1.0 or lower. The issue arises because BasiliX does not filter HTML tags when displaying messages, enabling an attacker to inject arbitrary HTML/script into the message...
SquirrelMail: Several XSS vulnerabilities
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description SquirrelMail is vulnerable to several cross-site scripting issues, most reported by Martijn Brinkers. Impact By enticing a user to read a specially-crafted e-mail or using a manipulated...
CVE-2005-2022
Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting XSS vulnerability...
SquirrelMail < 1.4.5 Multiple Vulnerabilities
Binary data 3016.prm...
Popper Webmail 1.41 - ChildWindow.Inc.php Remote File Inclusion
Popper Webmail 1.41 - ChildWindow.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/13851/info Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...
Popper Webmail 1.41 - 'ChildWindow.Inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/13851/info Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affect...
CVE-2005-1819
The CVE-2005-1819 entry concerns NikoSoft WebMail before version 0.11.0, where a cross-site scripting (XSS) flaw exists that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The vulnerability affects the WebMail component as described in multiple sources (e.g., ...
CVE-2005-1819
Cross-site scripting XSS vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2005-1819
Cross-site scripting XSS vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
netmailsharpro.txt
Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...
Kerio MailServer DoS
WebMail vulnerability leads to 100 CPU exhaustion. Crash on multiple attached .eml files, DoS with IMAP and Outlook Connectors...
CVE-2003-1202
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 password, 2 domainname, or 3 username...