CVE-2010-5334: Improper Limitation of a Pathname to a Restricted Directory

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter c to basic/index.html is not properly sanitised and can therefore be exploited to browse the...

CVE-2005-0842: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 i or 2 c parameter...