8 matches found
EUVD-2002-1478
Malware in sbrugna...
Rudi Benkovic JAWMail 1.0 Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5771/info Problems with JAWMail could make it possible to execute arbitrary script code in a vulnerable client. JAWMail does not sufficiently filter malicious HTML code from e-mails. As a result, when a user opens an emai...
CVE-2002-1495
Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...
CVE-2002-1495
The CVE-2002-1495 entry documents a Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1. The vulnerability allows remote attackers to inject arbitrary script or HTML through multiple vectors: (1) attached file names in the Read Mail feature, (2) text/html mails displayed in a pop-up windo...
CVE-2002-1495
Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...
JAWmail XSS
JAWmail XSS PROGRAM: JAWmail VENDOR: Rudi Benkovic [email protected] et al. HOMEPAGE: http://www.jawmail.org/ VULNERABLE VERSIONS: 1.0-rc1, possibly others IMMUNE VERSIONS: 2.0-rc1 and later LOGIN REQUIRED: no SEVERITY: high DESCRIPTION: JAWmail Just Another Web Mail is a pretty ambitious web mail...
Rudi Benkovic JAWMail 1.0 - Script Injection
Rudi Benkovic JAWMail 1.0 - Script Injection source: https://www.securityfocus.com/bid/5771/info Problems with JAWMail could make it possible to execute arbitrary script code in a vulnerable client. JAWMail does not sufficiently filter malicious HTML code from e-mails. As a result, when a user...
Rudi Benkovic JAWMail 1.0 - Script Injection
source: https://www.securityfocus.com/bid/5771/info Problems with JAWMail could make it possible to execute arbitrary script code in a vulnerable client. JAWMail does not sufficiently filter malicious HTML code from e-mails. As a result, when a user opens an email in JAWMail that contains malicio...