123 matches found
PT-2022-22582
Name of the Vulnerable Software and Affected Versions IceWarp WebClient DC2 version 13.0.2.9 Description A SQL injection issue was found via the search parameter at the "/webmail/server/webmail.php" API endpoint. This allows for potential exploitation. Recommendations For IceWarp WebClient DC2...
CVE-2022-35115: Improper Neutralization of Special Elements used in an SQL Command
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2012-2593
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
Cross site scripting
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
CVE-2012-2593
The connected documentation confirms a concrete issue: Atmail Webmail Server 6.4 has an XSS vulnerability in its administrative interface that can be triggered via the Date field of an email, enabling attackers to inject arbitrary script/HTML. Exploitation is evidenced by linked exploit-publicati...
CVE-2012-2593
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
PT-2020-7206
Name of the Vulnerable Software and Affected Versions Atmail Webmail Server version 6.4 Description The issue is related to a cross-site scripting XSS vulnerability in the administrative interface. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the Date fiel...
CVE-2012-2593: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
IceWarp Webmail Server color Cross-Site Scripting Vulnerability
IceWarp Webmail Server is a WEB mail server. IceWarp Webmail Server color handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
IceWarp WebMail Server =11.4.4.2 or apply the vendor patch. Public exploits/poC references (e.g., Exploit-DB entry 47988) indicate real-world testing of the vulnerability. No details on successful exploitation in the provided docs beyond the XSS description. Recommend applying the vendor patch or...
PT-2020-20189
Name of the Vulnerable Software and Affected Versions IceWarp Webmail Server versions prior to 11.4.4.1 Description The issue concerns a problem where an attacker can execute malicious scripts. This is due to XSS in the color parameter of the "/webmail/" API endpoint. Recommendations For versions...
CVE-2020-8512: Improper Neutralization of Input During Web Page Generation
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
IceWarp WebMail Server Cross-Site Scripting Vulnerability (CNVD-2020-02978)
IceWarp WebMail Server is a Web-based mail server product from the U.S. company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in object annotations in IceWarp WebMail Server version 12.2.0 and...
CVE-2019-19266
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...