Lucene search
+L

2190 matches found

Prion
Prion
•added 2008/01/10 11:46 p.m.•20 views

Cross site scripting

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.02967EPSS
SaveExploits2References5
NVD
NVD
•added 2008/01/10 11:46 p.m.•29 views

CVE-2008-0218

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.02967EPSS
SaveExploits2References5
CVE
CVE
•added 2008/01/10 11:00 p.m.•60 views

CVE-2008-0218

IceWarp Merak Mail Server (admin/index.html) is affected by an XSS in the message parameter. The vulnerability arises from insufficient sanitization of user input, allowing an unauthenticated, remote attacker to inject arbitrary HTML/JavaScript that executes in the victim’s browser within the sit...

4.3CVSS5.6AI score0.02967EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2008/01/10 11:00 p.m.•35 views

CVE-2008-0218

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.02967EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/10 12:00 a.m.•9 views

CVE-2008-0218: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.02967EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2008/01/09 12:00 a.m.•27 views

IceWarp Mail Server admin/index.html message Parameter XSS

The remote host is running IceWarp Merak Mail Server, a webmail server for Windows and Linux. The remote version of IceWarp fails to sanitize user input to the 'message ' parameter of the 'admin/index.html' script before using it to generate dynamic content. An unauthenticated, remote attacker ma...

4.3CVSS5.7AI score0.02967EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2008/01/08 12:00 a.m.•20 views

IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting

IceWarp Mail Server 9.1.1 - adminindex.html Cross-Site Scripting source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

SaveExploits0
Exploit DB
Exploit DB
•added 2008/01/08 12:00 a.m.•38 views

IceWarp Mail Server 9.1.1 - '/admin/index.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

4.3CVSS5.8AI score0.02967EPSS
SaveExploits2
Prion
Prion
•added 2007/11/23 8:46 p.m.•24 views

Design/Logic Flaw

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

4CVSS6.9AI score0.01351EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2007/11/23 8:46 p.m.•28 views

CVE-2007-6101

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

4CVSS6.4AI score0.01351EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2007/11/23 8:00 p.m.•34 views

CVE-2007-6101

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

6.4AI score0.01351EPSS
SaveExploits0References7
CVE
CVE
•added 2007/11/23 8:00 p.m.•56 views

CVE-2007-6101

CVE-2007-6101 affects Ability Mail Server up to version 2.61 (i.e., before 2.61). The vulnerability arises in two areas: (1) IMAP commands with malformed number list ranges and (2) messages containing a blank string. Both issues can be exploited by remote authenticated users to cause a denial of ...

4CVSS6.4AI score0.01351EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/23 12:00 a.m.•7 views

CVE-2007-6101: Improper Input Validation

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

4CVSS5.8AI score0.01351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2007/11/21 12:00 a.m.•24 views

Ability Mail Server < 2.61 Multiple Remote DoS

The remote host appears to be running Ability Mail Server. According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash. One involves messages that are changed to a blank string, the other IMAP4 commands with malformed...

4CVSS5.5AI score0.01351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2007/11/21 12:00 a.m.•24 views

Ability Mail Server < 2.61 Multiple Vulnerabilities

Binary data 4292.prm...

4CVSS7.3AI score0.01351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2007/11/21 12:00 a.m.•14 views

Ability Mail Server < 2.61 Multiple Vulnerabilities

Binary data 4291.prm...

4CVSS7.3AI score0.01351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2007/11/21 12:00 a.m.•17 views

Ability Mail Server < 2.61 Multiple Vulnerabilities

Binary data 4290.prm...

4CVSS7.3AI score0.01351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2007/11/21 12:00 a.m.•32 views

Ability Mail Server < 2.61 Multiple Vulnerabilities

Binary data 4293.prm...

4CVSS7.3AI score0.01351EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/10/31 4:00 p.m.•44 views

CVE-2002-2388

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service crash via a long HELO command...

6.8AI score0.01195EPSS
SaveExploits0References2
CVE
CVE
•added 2007/10/31 4:00 p.m.•65 views

CVE-2002-2388

The vulnerability CVE-2002-2388 affects INweb POP3 mail server 2.01. The root cause is a buffer overflow triggered by a long HELO command, allowing remote attackers to cause a denial of service (crash). This is described in the CVE entry and corroborated by Red Hat and CVE records. No remediation...

5CVSS7.2AI score0.01195EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder