CVE-2025-34316: Improper Neutralization of Input During Web Page Generation

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the txtmailuser and txtmailpass parameters when updating the mail server settings. When a user updates the mail...

EUVD-2020-13919

Malware in sbrugna...

IPFire Cross-Site Scripting Vulnerability

IPFire is a hardened, versatile Linux-based open source firewall. A cross-site scripting vulnerability exists in IPFire version 2.23. The vulnerability can be exploited by an attacker to conduct cross-site scripting attacks via the IPfire web UI in mail.cgi...

CVE-2020-21142

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

CVE-2020-21142

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

Cross site scripting

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

CVE-2020-21142

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

PT-2021-10597

Name of the Vulnerable Software and Affected Versions: IPFire version 2.23 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the IPFire web UI, specifically in the mail.cgi component. This vulnerability can be exploited via the IPfire web UI. Recommendation...

CVE-2020-21142: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

IPFire cross-site scripting vulnerabilities

IPFire is a hardened, versatile Linux-based open source firewall. A cross-site scripting vulnerability exists in IPFire version 2.23. The vulnerability can be exploited by an attacker to conduct cross-site scripting attacks via the IPfire web UI in mail.cgi...

IPFire 2.21 Cross Site Scripting

Exploit Title: IPFire 2.21 - Core Update 127 | Cross-Site Scripting Date: 08.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.ipfire.org Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.21-core127/ipfire-2.21.x8664-full-core127.iso Version: IPFire 2.21 - Core Updat...

CVE-2006-4344: Undefined Security Weakness

CRLF injection vulnerability in CGI-Rescue Mail F/W System formd before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in 1 mail.cgi and 2 query.cgi...