EUVD-2013-1931

Malware in sbrugna...

CVE-2013-1938

Zimbra 2013 has XSS in aspell.php...

CVE-2013-1938

Zimbra 2013 has XSS in aspell.php...

Design/Logic Flaw

Zimbra 2013 has XSS in aspell.php...

CVE-2013-1938

Zimbra 2013 has XSS in aspell.php...

CVE-2013-1938

CVE-2013-1938 affects Zimbra Collaboration Server’s aspell.php dictionary parameter. The vulnerability is an XSS in the aspell.php script where user-supplied input to the dictionary parameter is not properly sanitized, allowing injection of arbitrary HTML/JS into a user’s browser. Documented refe...

Zimbra Collaboration Server aspell.php dictionary Parameter XSS

The version of the Zimbra Collaboration Server spell check service installed on the remote host is affected by a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input to the 'dictionary' parameter of the 'aspell.php' script. An attacker may be able to...