146 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the handling of SVG documents, specifically when processing the animate tag. An attacker can execute arbitrary scripts in the context of the victim's webmail session by tricking a user into opening an email...
EUVD-2025-37359
An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img HTML tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window...
CVE-2025-12460
Summary: CVE-2025-12460 describes a Stored XSS vulnerability in Afterlogic Aurora webmail. Affected versions: 9.8.3 and earlier. ** vulnerability mechanism:** an attacker can embed JavaScript in an HTML email via an img tag, which may execute in the recipient’s webmail browser context. Impact (pe...
EUVD-2006-0800
Malware in sbrugna...
EUVD-2012-5988
Malware in sbrugna...
EUVD-2002-1369
Malware in sbrugna...
EUVD-2005-2024
Malware in sbrugna...
EUVD-2011-1495
Malware in sbrugna...
EUVD-2005-0105
Malware in sbrugna...
EUVD-2010-4433
Malware in sbrugna...
EUVD-2020-5895
Malware in sbrugna...
EUVD-2007-2647
Malware in sbrugna...
EUVD-2004-2449
Malware in sbrugna...
EUVD-2020-28850
Malware in sbrugna...
EUVD-2019-18371
Malware in sbrugna...
EUVD-2019-18370
Malware in sbrugna...
EUVD-2010-3679
Malware in sbrugna...
EUVD-2004-2376
Malware in sbrugna...