Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:17 a.m.•41 views

CVE-2025-1741

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS4.9AI score0.00409EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2007-4956

Malware in sbrugna...

4.3CVSS6.4AI score0.01736EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-5453

Malicious code in bioql PyPI...

5.8CVSS5.2AI score0.00409EPSS
SaveExploits0References7
NVD
NVD
•added 2025/02/27 4:15 p.m.•21 views

CVE-2025-1741

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS0.00409EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/02/27 4:00 p.m.•38 views

CVE-2025-1741 b1gMail Admin Page users.php deserialization

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS0.00409EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/02/27 4:00 p.m.•11 views

CVE-2025-1741 b1gMail Admin Page users.php deserialization

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS5AI score0.00409EPSS
SaveExploits0References7
Mend
Mend
•added 2025/02/27 4:00 p.m.•3 views

CVE-2025-1741

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS0.00409EPSS
SaveExploits0References9
CVE
CVE
•added 2025/02/27 4:00 p.m.•74 views

CVE-2025-1741

CVE-2025-1741 affects b1gMail up to version 7.4.1-pl1 in the Admin Page component (src/admin/users.php). The vulnerability arises from deserialization when manipulating the query/q parameter, allowing remote exploitation. A fix is available: upgrade to 7.4.1-pl2 (patch identifier 4816c8b748f6a5b9...

5.8CVSS7AI score0.00409EPSS
SaveExploits0References7
OSV
OSV
•added 2025/02/27 4:00 p.m.•16 views

CVE-2025-1741 b1gMail Admin Page users.php deserialization

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.1CVSS4.9AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•22 views

PT-2025-8962 · B1Gmail · B1Gmail

Name of the Vulnerable Software and Affected Versions: b1gMail versions up to 7.4.1-pl1 Description: A problematic issue was found in the Admin Page component, specifically in the file src/admin/users.php, where the manipulation of the query/q argument leads to deserialization. This issue can be...

5.8CVSS5AI score0.00409EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•20 views

b1gMail 代码问题漏洞

b1gMail is an email service from b1gMail open source. A code issue vulnerability exists in b1gMail 7.4.1-pl1 and earlier versions that stems from deserialization...

5.8CVSS5AI score0.00409EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/27 12:00 a.m.•7 views

CVE-2025-1741: Deserialization of Untrusted Data

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

5.8CVSS4.9AI score0.00409EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

b1gMail 6.3.1 hilfe.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25699/info b1gMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...

7.1AI score
SaveExploits0
NVD
NVD
•added 2007/09/19 6:17 p.m.•27 views

CVE-2007-4975

Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

4.3CVSS5.7AI score0.01736EPSS
SaveExploits2References6
Prion
Prion
•added 2007/09/19 6:17 p.m.•28 views

Cross site scripting

Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

4.3CVSS6.1AI score0.01736EPSS
SaveExploits2References6Affected Software1
CVE
CVE
•added 2007/09/19 6:00 p.m.•78 views

CVE-2007-4975

The cited CVE-2007-4975 describes a Cross-site Scripting (XSS) vulnerability in hilfe.php of b1gMail 6.3.1, where an attacker can inject arbitrary script/HTML via the chapter parameter. Affected product appears to be b1gMail 6.3.1, with the vulnerable component/function being hilfe.php. The publi...

4.3CVSS5.7AI score0.01736EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/09/19 12:00 a.m.•9 views

CVE-2007-4975: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

4.3CVSS6AI score0.01736EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2007/09/19 12:00 a.m.•110 views

b1gmail Cross Site Scripting

b1gmail Cross Site Scripting ============================ Version: 6.3.1 site: http://www.b1gmail.de Profile: Cross Site Scripting Method: POST location:hilfe.php strings: "+onmouseover=alert1898233298+ http://site.com/hilfe.php?chapter="+onmouseover=alert1898233298+ credits: malibu.r...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/09/18 12:00 a.m.•36 views

b1gmail-xss.txt

b1gmail Cross Site Scripting ============================ Version: 6.3.1 site: http://www.b1gmail.de Profile: Cross Site Scripting Method: POST location: hilfe.php strings: "+onmouseover=alert1898233298+ http://site.com/hilfe.php?chapter="+onmouseover=alert1898233298+ credits: malibu.r powered by...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/09/17 12:00 a.m.•20 views

b1gMail 6.3.1 - hilfe.php Cross-Site Scripting

b1gMail 6.3.1 - hilfe.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25699/info b1gMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripti...

6.8AI score
SaveExploits0
Rows per page
Query Builder