137 matches found
EUVD-2005-4261
Malware in sbrugna...
EUVD-1999-0825
Malware in sbrugna...
EUVD-2001-0575
Malware in sbrugna...
EUVD-2006-5694
Malware in sbrugna...
EUVD-2000-1007
Malware in sbrugna...
EUVD-2008-6853
Malware in sbrugna...
EUVD-2002-1719
Malware in sbrugna...
EUVD-2000-0656
Malware in sbrugna...
EUVD-2005-4204
Malware in sbrugna...
EUVD-2002-1720
Malware in sbrugna...
EUVD-2008-6926
Malware in sbrugna...
CVE-2005-4266
WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value...
CVE-2021-27182
An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail aka WorldClient. It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user...
CVE-2021-27180
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail aka WorldClient. It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user...
Cross site scripting
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail aka WorldClient. It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user...
CVE-2021-27180
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail aka WorldClient. It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user...
CVE-2021-27182
An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail aka WorldClient. It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user...
CVE-2021-27180
MDaemon Webmail (WorldClient) on versions before 20.0.4 has a reflected XSS vulnerability exploitable via a GET request . The flaw can allow an attacker to perform actions with the privileges of the attacked user, with a NETWORK attack vector , UI required , and I/L/C/L/A impacts as described by ...
PT-2021-17299
Name of the Vulnerable Software and Affected Versions: MDaemon versions prior to 20.0.4 Description: An issue was discovered in the Webmail component of MDaemon, also known as WorldClient. This issue is related to Reflected XSS, which can be exploited via a GET request. It allows an attacker to...
PT-2021-17301
Name of the Vulnerable Software and Affected Versions: MDaemon versions prior to 20.0.4 Description: An issue was discovered in the Webmail component of MDaemon, also known as WorldClient. This issue is related to an IFRAME injection, which can be exploited via an email message. It allows an...