CVE-2011-1492

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are...

CVE-2009-4077

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...

FreeBSD Ports: squirrelmail

The remote host is missing an update to the system as announced in the referenced advisory. VID af9018b6-a4f5-11da-bb41-0011433a9404 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2006-0895

NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php...

CVE-2006-0895

NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php...

netmailsharpro.txt

Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...

[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...

security flaw

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...

security flaw

Cross-site scripting XSS vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables...

CVE-2005-0323

Cross-site scripting XSS vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL...

MailEnable Professional Webmail < 1.5.1 Unspecified Vulnerability

The version of MailEnable Professional hosted on the remote host has an unspecified vulnerability in the webmail module. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15611; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/07 16:46:51"; scriptbugtraqid11578;...

Open WebMail userstat.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on the target using the privileges under which the web server operates. For further...

CVE-2002-1385

openwebmailinit in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. dot dot sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be...

DEBIAN-CVE-2004-0591

Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...

Open WebMail vacation.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on a target using the privileges under which the web server operates. For further...

[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...

Open WebMail 1.x2.x - Remote Command Execution Variant

Open WebMail 1.x2.x - Remote Command Execution Variant source: https://www.securityfocus.com/bid/10316/info A vulnerability has been reported in Open WebMail that allows a remote attacker to execute arbitrary commands on a vulnerable host. The problem is due to insufficient sanitization of shell...

Open WebMail 1.x/2.x - Remote Command Execution Variant

source: https://www.securityfocus.com/bid/10316/info A vulnerability has been reported in Open WebMail that allows a remote attacker to execute arbitrary commands on a vulnerable host. The problem is due to insufficient sanitization of shell metacharacters that are passed to the vulnerable softwa...

iXmail Multiple Script Arbitrary File Manipulation

The remote host is running the iXmail webmail interface. There is a flaw in this interface which allows an attacker who has a valid account on this host to upload and execute arbitrary php files on this host, thus potentially gaining a shell on this host. An attacker may also use this flaw to...