145 matches found
CVE-2017-14597: Improper Neutralization of Input During Web Page Generation
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection
No description provided by source...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro...
AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection
ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure (via XXE Injection)
Exploit for asp platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection
ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...
AfterLogic WebMail 任意文件包含漏洞
No description provided by source...
AfterLogic WebMail settings.xml 信息泄露
No description provided by source...
AfterLogic WebMail Lite Authentication Bypass
AfterLogic WebMail Lite is a free web-based IMAP and SMTP email-client with Ajax interface. AfterLogic WebMail Lite is available for both PHP and ASP.NET platforms. The version of AfterLogic WebMail Lite that is written in PHP is free and open-source software subject to the terms of the Affero...
After Logic Mail - Remote Admin Takeover (All versions)
AfterLogic WebMail Lite is a free web-based IMAP and SMTP email-client with Ajax interface. AfterLogic WebMail Lite is available for both PHP and ASP.NET platforms. The version of AfterLogic WebMail Lite that is written in PHP is free and open-source software subject to the terms of the Affero...
AfterLogic MailBee WebMail Pro 3.x login.php mode Parameter XSS
No description provided by source...
AfterLogic WebMail Pro 4.7.10 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...
afterlogic mailsuite pro (vmware appliance) 6.3 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: AfterLogic Mailsuite Pro VMware Appliance Version: 6.3 Vendor Site: http://www.afterlogic.com/ Software Download: http://www.afterlogic.com/download/ Timeline: 29 May 2012: Vulnerability...
AfterLogic WebMail Lite PHP 7.0.1 - CSRF Vulnerability
No description provided by source. 1. 2. 3. + Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin...
AfterLogic Pro and Lite 7.1.1.1 - Stored XSS
No description provided by source...
AfterLogic Pro and Lite 7.1.1.1存储型跨站脚本漏洞
No description provided by source. ?php / Exploit Title : AfterLogic Pro and Lite = 7.1.1.1 Stored XSS Google Dork : intext:"AfterLogic" intext:"Login Information" inurl:index.php Date : 19 Jan 2014 Exploit Author : Saeed reza Zamanian s.zamanian AT imenantivirus.com Vendor Homepage:...
AfterLogic Pro and Lite <= 7.1.1.1 Stored XSS Vulnerability
XSS codes can be stored in E-Mail Body. So you can send an email to the Victim with below payload and steal the victim's cookie. Usage Info Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer directory:...
AfterLogic Pro and Lite 7.1.1.1 - Persistent Cross-Site Scripting
AfterLogic Pro and Lite 7.1.1.1 - Persistent Cross-Site Scripting Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/AfterLogic/Default.aspx Phpmailer class is included in the exploit so you nee...
AfterLogic Pro and Lite 7.1.1.1 - Persistent Cross-Site Scripting
Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/AfterLogic/Default.aspx Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer...
AfterLogic Pro / Lite 7.1.1.1 Cross Site Scripting
Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/AfterLogic/Default.aspx Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer...