4371 matches found
[SECURITY] Fedora 19 Update: roundcubemail-0.9.3-2.fc19
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Roundcube Webmail 0.9.2 Cross Site Scripting
Roundcube Webmail 0.9.2 XSS Vulnerability ======================================================== Site: http://www.roundcube.net Discovered by: Andrea Menin base64 @: bWVuaW4uYW5kcmVhQGdtYWlsLmNvbQ== Follow me: http://www.linkedin.com/in/andreamenin...
Oracle Linux 5 : squirrelmail (ELSA-2009-1490)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1490 advisory. - fix: CVE-2009-2964 : CSRF issues in all forms - extend to all forms - fix: CVE-2009-2964 : CSRF issues in all forms - add missing parts Tenable has extracted...
Oracle Linux 4 : squirrelmail (ELSA-2006-0668)
From Red Hat Security Advisory 2006:0668 : A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a...
Nameko Webmail Cross Site Scripting
Nameko Webmail XSS Vulnerability on version tag that is possible to break and execute any javascript inside a tag . The URL for match the XSS, should be like url-decoded: ?fontsize=11pt;++alertdocument.cookiebody++font-size:11 XSS URL: -------- https:// victim host...
AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery
Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...
AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery
AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explor...
[ MDVSA-2013:149 ] roundcubemail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:149 http://www.mandriva.com/en/support/security/ Package : roundcubemail Date : April 21, 2013 Affected: Business Server 1.0 Problem Description: A vulnerability has been found and corrected in roundcubemail...
Fedora Update for roundcubemail FEDORA-2013-4564
Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2013-4564 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] Fedora 17 Update: roundcubemail-0.8.6-1.fc17
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 18 Update: roundcubemail-0.8.6-1.fc18
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
JVN#04288738: Active! mail vulnerable to information disclosure
Active! mail provided by TransWARE is a webmail software. Active! mail contains an information disclosure vulnerability. Impact If the "external public interface" is enabled, an attacker who can log into the server may obtain users credentials. Solution Restrict log-in to the server Allow...
Lotus Domino 8.5.4 Cross Site Scripting
Hello list! I want to warn you about multiple Cross-Site Scripting vulnerabilities in IBM Lotus Domino. Last year I've announced multiple vulnerabilities in IBM software and after IBM fixed many of them, I've disclosed them. These are new vulnerabilities in Domino, which I've found at 03.05.2012...
Atmail WebMail - Message Attachment File Name Reflected Cross-Site Scripting
source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Atmail WebMail - searchResultsTab5?filter Reflected Cross-Site Scripting
Atmail WebMail - searchResultsTab5?filter Reflected Cross-Site Scripting source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...
Atmail WebMail - INBOX.Trash?mailId Reflected Cross-Site Scripting
Atmail WebMail - INBOX.Trash?mailId Reflected Cross-Site Scripting source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
Atmail WebMail - 'searchResultsTab5?filter' Reflected Cross-Site Scripting
source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Atmail WebMail - Message Attachment File Name Reflected Cross-Site Scripting
Atmail WebMail - Message Attachment File Name Reflected Cross-Site Scripting source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
