CVE-2023-37728

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

Cross site scripting

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

Icewarp Icearp 跨站脚本漏洞

Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...

CVE-2023-37728

IceWarp Webmail Server v10.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability reachable via the color parameter. The Nuclei template and related references describe an XSS that could allow an unauthenticated attacker to inject JavaScript and potentially access user sessions (cookie lea...

EUVD-2023-41605

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-37728

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

CVE-2023-37728

IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...

PT-2023-6541 · Icewarp · Icewarp

Name of the Vulnerable Software and Affected Versions: IceWarp version 10.2.1 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the color parameter, allowing a remote attacker to conduct cross-site scripting attacks...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

Sql injection

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 Update 2 Build 9 (13.0.2.9) is affected by a SQL injection vulnerability exploitable via the search parameter in /webmail/server/webmail.php. The issue yields a CVSSv3.1 score of 9.8 (CRITICAL) with Network attack vector, no user interaction, and requires no privileges. The ...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

IceWarp WebClient SQL注入漏洞

IceWarp WebClient is a web-based mail service client from IceWarp, Inc. A security vulnerability exists in IceWarp WebClient DC2 version 13.0.2.9, which originates from an SQL injection vulnerability discovered via the search parameter of /webmail/server/webmail.php...

IceWarp WebClient Cross-Site Scripting Vulnerability

Icewarp IceWarp WebClient is a web-based mail service client from IceWarp Icewarp. A cross-site scripting vulnerability exists in IceWarp WebClient, which stems from the P4 field of the product's Webmail Calender feature not validating user input data. The vulnerability can be exploited to execut...

CVE-2020-25925

Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...

CVE-2020-25925

Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...

Cross site scripting

Cross Site Scripting XSS in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field...

CVE-2020-25925

CVE-2020-25925 describes a cross-site scripting (XSS) flaw in IceWarp WebClient’s Webmail Calendar (version 10.3.5). The vulnerability allows an attacker to inject arbitrary web script or HTML through the p4 field, enabling client-side code execution. The available connected documents confirm the...