CVE-2023-39598

IceWarp WebClient 10.2.1 is affected by CVE-2023-39598: a Cross Site Scripting vulnerability that enables an attacker to run arbitrary script in the victim’s browser by crafting a payload to the mid parameter. The Nuclei template notes potential impacts such as session hijacking, defacement, or s...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

Cross site scripting

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

Cross site scripting

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter...

Code injection

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-39600

IceWarp 11.4.6.0 is affected by a cross-site scripting (XSS) vulnerability in the color parameter. The issue, confirmed by multiple sources, allows injection of arbitrary JavaScript in the context of the victim’s browser. Remediation is to apply vendor patches/updates (per the NVD/Nuclei entries ...

IceWarp 跨站脚本漏洞

IceWarp is an integrated enterprise communication and collaboration platform from IceWarp, a Czech company, designed to provide organizations with the tools and functionality to support internal and external communication, collaboration and business processes. A security vulnerability exists in...

CVE-2023-39600

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter...

PT-2023-6725 · Icewarp · Icewarp Mail Server

Name of the Vulnerable Software and Affected Versions: IceWarp Mail Server version 10.4.5 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks. The vulnerability is...

IceWarp Mail Server 跨站脚本漏洞

IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration, and more. A security vulnerability exists in IceWarp Mail Server version v10.4.5, which originates from a reflected cross-site...

CVE-2023-39699

CVE-2023-39699 affects IceWarp Mail Server v10.4.5 via a Local File Inclusion (LFI) in the /calendar/minimizer/index.php component. The vulnerability allows an attacker to include or execute files from the server’s local filesystem. Documented impact is high (potential code execution/unauthorized...