8 matches found
EUVD-2013-1931
Malware in sbrugna...
CVE-2013-1938
Zimbra 2013 has XSS in aspell.php...
CVE-2013-1938
Zimbra 2013 has XSS in aspell.php...
Design/Logic Flaw
Zimbra 2013 has XSS in aspell.php...
CVE-2013-1938
Zimbra 2013 has XSS in aspell.php...
CVE-2013-1938
CVE-2013-1938 affects Zimbra Collaboration Server’s aspell.php dictionary parameter. The vulnerability is an XSS in the aspell.php script where user-supplied input to the dictionary parameter is not properly sanitized, allowing injection of arbitrary HTML/JS into a user’s browser. Documented refe...
PT-2020-7375
Name of the Vulnerable Software and Affected Versions: Zimbra 2013 Description: The issue is related to a Cross-Site Scripting XSS problem. It affects the aspell.php file. Recommendations: For Zimbra 2013, consider disabling access to the aspell.php file as a temporary workaround until a patch is...
Zimbra Collaboration Server aspell.php dictionary Parameter XSS
The version of the Zimbra Collaboration Server spell check service installed on the remote host is affected by a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input to the 'dictionary' parameter of the 'aspell.php' script. An attacker may be able to...