128 matches found
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; return $result; ... This function should check for session files...
Winmail Mail Server 2.3 Remote Format String Exploit
No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...
Winmail Server Webmail Unspecified Vulnerability
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. According to its version number, the remote installation of Winmail Server is affected by an unknown issue in its webmail component. It is unclear whether this is the same issue...
Design/Logic Flaw
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...
CVE-2006-1250
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...
CVE-2006-1250
Technical details for CVE-2006-1250 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
CVE-2006-1250
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...
CVE-2006-1250: Undefined Security Weakness
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...
CVE-2005-3811
CVE-2005-3811 describes a directory traversal vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier, exploitable remotely via the sid parameter in admin/main.php to overwrite arbitrary files using session information. Affected product: Winmail Server (AMAX) versions 4.2 and earl...
CVE-2005-3811
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter...
CVE-2005-3811: Undefined Security Weakness
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter...
CVE-2004-2572
AMAX Magic Winmail Server 3.6 is affected. The vulnerability arises from improper processing of the $keyword variable in the netaddressbook.php form, causing ldap_search failures to reveal the local path via ldaplib.php error messages. This leads to information disclosure through invalid characte...
CVE-2004-2572: Undefined Security Weakness
AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering 1 invalid characters such as "" or 2 a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldapsearch...
KLA10399 Multiple vulnerabilities in Winmail
Multiple serious vulnerabilities have been found in Winmail Server. Malicious users can exploit these vulnerabilities to inject scripts or overwrite local files. Below is a complete list of vulnerabilities 1. A directory traversal can be exploited remotely via a side parameter; 2. An XSS...
Winmail Server <= 4.2 Build 0824 Multiple Vulnerabilities
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. The web interface that is used by Winmail Server for reading mail and administering the server fails to sanitize user-supplied input to various parameters and scripts. Beyond the...
CVE-2005-3692
Cross-site scripting XSS vulnerability in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 retid parameter in badlogin.php, 2 Content-Type headers in HTML mails, and 3 HTML mail attachments...
CVE-2005-3692
CVE-2005-3692 affects AMAX Magic Winmail Server 4.2 and earlier with a cross-site scripting (XSS) flaw. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachmen...
CVE-2005-3692: Undefined Security Weakness
Cross-site scripting XSS vulnerability in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 retid parameter in badlogin.php, 2 Content-Type headers in HTML mails, and 3 HTML mail attachments...
[Full-disclosure] Secunia Research: Winmail Server Multiple Vulnerabilities
====================================================================== Secunia Research 18/11/2005 - Winmail Server Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...