Hastymail2 - rs=passthru RCE (CVE-2011-4542)

Exploits CVE-2011-4542 by POSTing rs=passthru with attacker-controlled rsargs to index.php mailbox Drafts. !/usr/bin/env python3 -- coding: utf-8 -- """Hastymail2 rs=passthru RCE CVE-2011-4542.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

EUVD-2011-4467

Malware in sbrugna...

CVE-2011-4542

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

CVE-2011-4542

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

CVE-2011-4541

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

PT-2011-4976

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

CVE-2011-4541: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...