Cross site scripting

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name...

CVE-2019-19129

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name...

CVE-2019-19129

Technical details about CVE-2019-19129 are not publicly provided in the connected documents; no root cause, affected components, or fixes are disclosed. Monitor for updates.

PT-2019-15773

Name of the Vulnerable Software and Affected Versions Afterlogic WebMail Pro version 8.3.11 Afterlogic Aurora version 8.3.11 Description The issue allows for Remote Stored XSS via an attachment name. Recommendations For Afterlogic WebMail Pro version 8.3.11, update to a version that fixes the...

CVE-2019-19129: Improper Neutralization of Input During Web Page Generation

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name...

CVE-2019-16238

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login...

CVE-2019-16238

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login...

Session fixation

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login...

CVE-2019-16238

CVE-2019-16238 affects Afterlogic Aurora up to version 8.3.9-build-a3, where an XSS vulnerability can be exploited to hijack an administrator session by retrieving the login session cookie. Root cause: insufficient input sanitization enabling script execution in the admin login flow. Impact: pote...

CVE-2019-16238: Improper Neutralization of Input During Web Page Generation

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login...

PT-2019-14592

Name of the Vulnerable Software and Affected Versions Afterlogic Aurora versions 8.3.9-build-a3 and earlier Description The issue allows for session hijacking by exploiting a cross-site scripting XSS weakness, enabling the retrieval of the session cookie from the administrator login...

AfterLogic Aurora / Webmail XSS Vulnerability (Aug 2017)

AfterLogic Aurora/WebMail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

AfterLogic Aurora / WebMail Detection (HTTP)

HTTP based detection of AfterLogic Aurora / WebMail. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

Affected software: AfterLogic WebMail 7.7 and Aurora 7.7.5; component: AdminPanel via adminpanel/modules/pro/inc/ajax.php. Issue: cross-site scripting (XSS) vulnerability exploitable via the txtDomainName field during domain addition. Root cause: improper handling of input in the AdminPanel domai...

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

PT-2017-13570

Name of the Vulnerable Software and Affected Versions AfterLogic WebMail version 7.7 AfterLogic Aurora version 7.7.5 Description The issue concerns an XSS vulnerability in the AdminPanel of AfterLogic WebMail and Aurora. This vulnerability can be exploited via the txtDomainName field in the...

AfterLogic WebMail and Aurora Cross-Site Scripting Vulnerabilities

AfterLogic WebMail and Aurora are both products of AfterLogic, Inc. AfterLogic Aurora is a set of enterprise-class e-mail servers.WebMail is an e-mail client.AdminPanel is one of the back-end management systems. A cross-site scripting vulnerability exists in AfterLogic WebMail version 7.7 and...