Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:39 a.m.•17 views

CVE-2024-33231

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

5.4CVSS7AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/18 11:15 p.m.•38 views

CVE-2024-33231

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

5.4CVSS0.00433EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•14 views

Ferozo Email 安全漏洞

Ferozo Email is a powerful and simple hosting panel from Ferozo. A security vulnerability exists in Ferozo Email version 1.1, which stems from vulnerability to cross-site scripting attacks, where a local attacker can execute arbitrary code against the PDF Preview component via a crafted payload...

5.4CVSS6.5AI score0.00433EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/18 12:00 a.m.•24 views

CVE-2024-33231

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

7AI score0.00433EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/18 12:00 a.m.•70 views

CVE-2024-33231

Ferozo Email version 1.1 is affected by a Cross-Site Scripting (XSS) vulnerability that allows a local attacker to execute arbitrary code via a crafted payload delivered to the PDF preview component . The root cause is insufficient sanitization and validation of file metadata and content during t...

5.4CVSS7AI score0.00433EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/18 12:00 a.m.•36 views

CVE-2024-33231

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

0.00433EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•4 views

CVE-2024-33231: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

5.4CVSS6.5AI score0.00433EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/18 12:00 a.m.•14 views

PT-2024-25166 · Unknown · Ferozo Webmail

Name of the Vulnerable Software and Affected Versions: Ferozo Email version 1.1 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component. This enables the attacker to perform actions on the affected system...

5.4CVSS7.4AI score0.00433EPSS
SaveExploits0References6
Rows per page
Query Builder