CVE-2023-4593

Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's intended restrictions and list a parent directory via any filename, such as a multiple ..%2F value affecting the 'dodoc' parameter in the /MailAdmindll.htm file...

PT-2023-29767 · Bvrp +1 · Slmail

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is a path traversal vulnerability that could allow an authenticated remote user to bypass SecurityManager's intended restrictions. This can be...

PT-2014-8955

Name of the Vulnerable Software and Affected Versions Scalix Web Access version 11.4.6.12377 Description A cross-site scripting XSS issue exists in the mail administration login panel, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized...

CVE-2014-9352: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...