CVE-2006-3108

Cross-site scripting XSS vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter...

EUVD-2012-2577

Malware in sbrugna...

EUVD-2006-2971

Malware in sbrugna...

EUVD-2006-3105

Malware in sbrugna...

PT-2014-2253

Name of the Vulnerable Software and Affected Versions EmailArchitect Email Server versions 10.0 through 10.0.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the From or Date field in an email, potentially leading to cross-site scripting XSS attacks...

CVE-2012-2591: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

CVE-2006-3108

EmailArchitect Email Server 6.1 is affected by an XSS vulnerability. An attacker can inject arbitrary JavaScript by exploiting a malformed HTML div tag where a carriage return sits between the onmouseover attribute and its value, bypassing the mail filter. This is described in multiple sources (N...

CVE-2006-3108: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter...

CVE-2006-2974

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...

CVE-2006-2974

The CVE-2006-2974 entry concerns EmailArchitect Email Server (versions up to 6.1.0.5). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters: (1) errCode and (2) uid in default.asp, and (3) dna...

CVE-2006-2974: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...