Hosting Controller 0.6.1 - User Registration (2)

Hosting Controller 0.6.1 - User Registration 2 / Hosting Controller include include include include include define PORT1 80 // port of web server define PORT...

Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

Multiple Merak Mail Server vulnerabilities

Unauthorized access, crossite scripting, etc...

Qmail mail server 64-bit platforms integer overflow

No description provided...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

Exploit for linux platform in category remote exploits ============================================================== dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit ============================================================== / dSMTP - SMTP Mail Server 3.1b Linux Remote Root...

dSMTP Mail Server 3.1b (Linux) - Format String

dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...

dSMTP Mail Server 3.1b (Linux) - Format String

/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...

NetWin DMail mail server multiple vulnerabilities

Unauthenticated maling lists access, SMTP format string vulnerability...

602LAN SUITE mail server webmail directory traversal.

Directory traversal in webmail interface...

CVE-2005-1282

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-0321

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to 1 calendard.html, 2 calendarm.html, 3 calendarw.html, or 4 calendary.html, which reveal the installation path...

CVE-2005-1284

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request...

CVE-2005-0322

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the 1 users.cfg, 2 settings.cfg, 3 users.dat or 4 user.dat files, which allows local users to extract the passwords...

CVE-2005-1282

CVE-2005-1282 affects ArGoSoft Mail Server Pro 1.8.7.6, with multiple XSS vulnerabilities allowing remote injection via (1) IMG src, (2) webmail user settings, or (3) address book input. The connected sources confirm XSS exposure and affected component, but do not provide patch/version remediatio...

CVE-2005-1284

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request...

CVE-2005-1282

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-1283

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

CVE-2005-1283

Summary : CVE-2005-1283 describes multiple directory traversal vulnerabilities in ArGoSoft Mail Server Pro 1.8.7.6. Remote authenticated users can read arbitrary files via the UIDL parameter to the msg script or copy/move the user’s .eml file to arbitrary locations via the delete script. This is ...

CVE-2005-1284

CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...