128 matches found
CVE-2024-55492
Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...
CVE-2024-55492
Winmail Server version 4.4 is vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw occurs due to the improper neutralization of input during web page generation, specifically involving the f_user variable. An attacker can exploit this by injecting a payload such as %22%3E%3Csvg%20on...
CVE-2024-55492
Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...
Winmail Server 安全漏洞
Winmail Server is a server-side application used to provide mail services by China Huazhao Winmail Company. A security vulnerability exists in Winmail Server version 4.4, which stems from the inclusion of a cross-site scripting vulnerability...
PT-2024-36529 · Unknown · Winmail Server
Name of the Vulnerable Software and Affected Versions: Winmail Server version 4.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It involves the f user variable and a specific payload %22%3E%3Csvg%20onload. This type of attack can allow an attacker to inject malicious...
CVE-2024-55492
Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...
CVE-2024-55492: Improper Neutralization of Input During Web Page Generation
Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
Code injection
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
WinMail Security Vulnerability
Winmail is a server-side application used to provide email services by Suzhou Huamei Technology Winmail, a Chinese company. A security vulnerability exists in WinMail version v.7.1 and v.5.1 and earlier versions, which originated from a vulnerability that allows remote attackers to execute...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
PT-2024-20965
Name of the Vulnerable Software and Affected Versions WinMail versions 5.1 and earlier WinMail version 7.1 Description An issue allows a remote attacker to execute arbitrary code via a crafted script to the email parameter. Recommendations For WinMail versions 5.1 and earlier, update to a version...
CVE-2024-25501: Improper Access Control
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
CVE-2024-25501
The server-side application WinMail , developed by Suzhou Huamei Technology, is vulnerable in versions v.7.1 and v.5.1 (and earlier). A security flaw allows a remote attacker to achieve arbitrary code execution by sending a crafted script to the email parameter . This vulnerability is associated ...
CVE-2020-23776
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request...
CVE-2020-23774
A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...
CVE-2020-23776
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request...
CVE-2020-23774
A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...
Server side request forgery (ssrf)
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request...