EUVD-2004-1100

Malware in sbrugna...

EUVD-2004-1098

Malware in sbrugna...

EUVD-2004-1099

Malware in sbrugna...

EUVD-2004-1101

Malware in sbrugna...

TIPS MailPost 5.1.1 Error Message Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11598/info MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and scri...

TIPS MailPost 5.1.1 APPEND Variable Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11596/info MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and scri...

TIPS MailPost 5.1.1 - Remote File Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of...

CVE-2004-1100

Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...

CVE-2004-1102

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information...

CVE-2004-1101

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service server crash, leak sensitive pathname information in the resulting error message, and execute a cross-site scripting XSS attack via an HTTP request that contains a / backslash and...

CVE-2004-1103

MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version...

CVE-2004-1103

MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version...

CVE-2004-1101

The CVE-2004-1101 entry concerns MailPost 5.1.1sv (and possibly earlier) and documents three issues: (1) remote denial of service causing a server crash, (2) leakage of sensitive pathname information in error messages, and (3) a cross-site scripting (XSS) vector triggered by an HTTP request conta...

CVE-2004-1101

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service server crash, leak sensitive pathname information in the resulting error message, and execute a cross-site scripting XSS attack via an HTTP request that contains a / backslash and...

CVE-2004-1100

Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...

CVE-2004-1102

MailPost 5.1.1sv (and possibly earlier) is affected by an information disclosure vulnerability where the error message varies depending on whether the requested file exists. This behavior can allow remote attackers to gain sensitive information. The CVE entry states the issue but does not provide...

CVE-2004-1103

CVE-2004-1103 affects MailPost 5.1.1sv (and possibly earlier) when debug mode is enabled. The vulnerability allows remote attackers to retrieve sensitive information via the debug parameter, revealing details such as the web root path and the web server version. According to NVD, the impact is pa...

CVE-2004-1100

The CVE-2004-1100 entry documents a cross-site scripting (XSS) flaw in MailPost 5.1.1sv (and possibly earlier versions) where, when debug mode is enabled, an attacker can inject arbitrary web script or HTML via the append parameter. The data here do not include a published fix or patch within the...

CVE-2004-1102

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information...

MailPost.exe Multiple Vulnerabilities

Binary data 2386.prm...