24 matches found
EUVD-2003-0648
Malware in sbrugna...
CVE-2003-0654
Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail...
GHSA-8C76-MXV5-W4G8 Stored Cross-site Scripting in Microweber
Microweber 1.2.11 and prior contains multiple stored cross-site scripting vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods...
Stored Cross-site Scripting in Microweber
Microweber 1.2.11 and prior contains multiple stored cross-site scripting vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods...
CVE-2022-0954 Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber
Multiple Stored Cross-site Scripting XSS Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0954
Multiple Stored Cross-site Scripting XSS Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11...
PT-2022-13553
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue concerns multiple stored cross-site scripting vulnerabilities found in specific settings of the microweber application, including Shop's Other Settings, Shop's Autorespond...
CVE-2022-0954: Improper Neutralization of Input During Web Page Generation
Multiple Stored Cross-site Scripting XSS Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11...
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods
Description 1 Checkout URL and Custom order id parameters are vulnerable to stored XSS, which are located in Shop Settings other settings Advanced 2 From e-mail address and From name parameters are vulnerable to stored XSS, which are located in Shop Settings Autorespond E-mail settings check your...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the autorespond package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, allows a perpetrator to increase their privileges.
The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, is related to incorrect definition of links before accessing a file. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by manipulating...
Zarafa Collaboration Platform zarafa-autorespond Privilege Gain Vulnerability
Zarafa Collaboration Platform ZCP is a suite of open source email and calendar software from Zarafa, Netherlands. A security vulnerability exists in zarafa-autorespond in versions of ZCP prior to 7.2.1. A local attacker can exploit this vulnerability to gain privileges by performing a symbolic li...
CVE-2015-6566: Improper Link Resolution Before File Access
zarafa-autorespond in Zarafa Collaboration Platform ZCP before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-...
PT-2016-1059
Name of the Vulnerable Software and Affected Versions Zarafa Collaboration Platform versions prior to 7.2.1 Description The issue is related to incorrect link resolution before file access in the zarafa-autorespond application, part of the Zarafa Collaboration Platform. This can be exploited by a...
Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability
================================================================== Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability ================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type: Remote Code...
Alt-N MDaemon WebAdmin Remote Code Execution
================================================================== Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability ================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type: Remote Code...
Debian: Security Advisory (DSA-373)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 373-1 (autorespond)
The remote host is missing an update to autorespond announced via advisory DSA 373-1. OpenVAS Vulnerability Test $Id: deb3731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 373-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-373-1 : autorespond - buffer overflow
Christian Jaeger discovered a buffer overflow in autorespond, an email autoresponder used with qmail. This vulnerability could potentially be exploited by a remote attacker to gain the privileges of a user who has configured qmail to forward messages to autorespond. This vulnerability is currentl...
