Cross site scripting

Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting XSS...

Crlf injection

CRLF injection vulnerability in the FILTERVALIDATEEMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address...

Unfixed XSS vulnerability at arnaldorodriguez.com

Security researcher cr0xip, has submitted on 04/08/2007 a cross-site-scripting XSS vulnerability affecting arnaldorodriguez.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currentl...

Design/Logic Flaw

Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured addresses...

CVE-2007-1803

Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured addresses...

CVE-2007-1803

MailDwarf vulnerability CVE-2007-1803 affects MailDwarf 3.01 and earlier. It is a remote flaw that allows an attacker to cause the system to send e-mails to addresses different from the ones configured by the administrator, i.e., unauthorized outbound mail. The JVN entry presents an overview stat...

CVE-2007-1717

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

CVE-2007-1718

CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the 1 Subject or 2 To parameter, as demonstrat...

CVE-2007-1717

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

Code injection

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

[Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability

IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Security Advisory 03.28.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 28, 2007 I. BACKGROUND IBM Lotus Domino Web Access is a web-based messaging and collaboration interface for the Lotus Domino server. More...

CVE-2007-1717

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

CVE-2006-7176

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages...

CVE-2006-7176

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages...

CVE-2006-7176

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages...

Unfixed XSS vulnerability at www.reflexpowerclean.co.uk

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.reflexpowerclean.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.blogdigger.com

Security researcher Narcoticxs, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.blogdigger.com, which at the time of submission ranked 24128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at drtr.test.cwfservice.net

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting drtr.test.cwfservice.net, which at the time of submission ranked 305421 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at hr.cch.com

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting hr.cch.com, which at the time of submission ranked 37478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at www.egosurf.org

Security researcher DjSedat, has submitted on 14/03/2007 a cross-site-scripting XSS vulnerability affecting www.egosurf.org, which at the time of submission ranked 195874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is current...