77 matches found
CVE-2004-1129
SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...
CVE-2004-1130
Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...
CVE-2004-1128
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename...
CVE-2004-1128
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename...
CVE-2004-1130
Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...
CVE-2004-1129
SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...
CVE-2004-1129
CVE-2004-1129 affects YoungZSoft CMailServer 5.2. A remote SQL injection is possible in the components fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp via the indexOfMail parameter, allowing an attacker to inject arbitrary SQL commands and compromise mail metadata and contac...
CVE-2004-1128
CVE-2004-1128 is a buffer overflow in CMailCOM.dll of YoungZSoft CMailServer 5.2 that allows remote code execution via an attachment with a long filename. The connected data confirms the vulnerable component and impact (remote arbitrary code execution) but does not provide specific exploit detail...
CVE-2004-1130
CVE-2004-1130 describes a Cross-site scripting (XSS) flaw in admin.asp of CMailServer 5.2 that allows remote attackers to execute arbitrary web script or HTML by supplying input to personal information fields (username, name, comments). The vulnerability is documented across NVD/CVE records with ...
CVE-2004-1128: Undefined Security Weakness
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename...
CVE-2004-1129: Undefined Security Weakness
SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...
CVE-2004-1130: Undefined Security Weakness
Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...
CMailServer multiple bugs
Buffer overflow, SQL injection, crossite scripting...
[SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities
SIG^2 Vulnerability Research Advisory CMailServer WebMail v5.2 Multiple Vulnerabilities by Tan Chew Keong Release Date: 24 Nov 2004 ADVISORY URL http://www.security.org.sg/vuln/cmailserver52.html SUMMARY CMailServer http://www.youngzsoft.net/cmailserver/ is a small and easy-to-use Mail Server...
Youngzsoft CMailServer < 5.2.1 Multiple Remote Vulnerabilities
Binary data 2432.prm...
Youngzsoft CMailServer < 5.2.1 Multiple Remote Vulnerabilities
The remote host is running YoungZSoft CMailServer, a mail server for Microsoft Windows. The version of CMailServer running on the remote machine has multiple vulnerabilities, including buffer overflow, SQL injection, and HTML injection. These vulnerabilities could allow a remote attacker to execu...
Youngzsoft CMailServer < 4.0.2003.03.30 RCPT TO Overflow
Binary data 2042.prm...
CVE-2003-0280
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...
CVE-2003-0280
CVE-2003-0280 : Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (MAIL FROM) or (RCPT TO) commands. The connected documents confirm the affected product/version and the remote-code-execution impact, with C...