15633 matches found
Active Web Mail 4 - Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home:...
Gordano NTMail 4.2 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/279/info A vulnerability in Gordano's NTMail allows remote malicious users to steal local files. Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the server...
Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit
No description provided by source. / Mercury imap4 server remote buffer overflow exploit author : c0d3r kaveh razavi [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company...
Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10323/info It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This issue may result in a victim...
University of Washington Pico 3.x/4.x File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, it is possible to...
Apple MacOS Internet Explorer 3/4/5 File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3935/info A vulnerability has been discovered in MacOS systems running Internet Explorer 5.1 and earlier. MacOS X is not affected by this issue. File URLs may be used by a malicious webmaster to execute programs on a web...
Concatus IMate Web Mail Server 2.5 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1286/info Sending an email to a Concatus IMate Web Mail Server 2.5 with a server name consisting of over 1119 characters will cause the application to crash. Restarting the program is required in order to regain normal...
NeoSys Neon Webmail for Java 5.06/5.07 updatemail Servlet Arbitrary Mail Message Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an...
True North Software Internet Anywhere Mail Server 2.3.x Mail Server Multiple Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/730/info True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands list, retr .uidl and user and the SMT...
concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities
No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...
Majordomo 1.89/1.90 lists Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute...
IceWarp Mail Server 9.1.1 'admin/index.html' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
IceWarp Merak Mail Server 9.4.1 'cleanHTML()' Function Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Qualcomm Eudora Internet Mail Server 1.2 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/75/info There appears to be a buffer overflow in Qualcomm's Eudora Internet Mail Server. If you connect to its TCP port number 106 and issue the USER command followed by a string over than a thousand bytes in length the...
IceWarp Web Mail 5.5.1 calendar_m.html createdataCX Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...
Hastymail 1.x IMAP SMTP Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands o...
PHP-Nuke 6.0 Web Mail Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6400/info A vulnerability has been discovered in the PHP-Nuke web mail module. Due to insufficient sanitization of HTML emails it is possible for an attacker to embed script code into malicious messages. Opening an email...
Rumble 0.25.2232 Denial of Service Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/...
SGI IRIX <= 6.4 rmail Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/460/info A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed with gid mail...