414 matches found
Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9827/info Microsoft Outlook is prone to a vulnerability that may permit execution of arbitrary code on client systems. This issue is exposed through Outlook, but will reportedly cause Internet Explorer to load malicious...
CGIScript.NET csMailto Hidden Form Field Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration values used by the script are...
Joomla_1.6.0-Alpha2 XSS Vulnerabilities
No description provided by source. Title:Joomla1.6.0-Alpha2 XSS Vulnerabilities Date: 2010-05-02 Author: mega-itec.com Software Link: http://joomlacode.org/gf/download/frsrelease/11322/45252/Joomla1.6.0-Alpha2-Full-Package.zip Version: 1.6.0-alpha2 Tested on: relevant os CVE : Code :...
MS IE 3/4/5,Netscape Communicator 4 IMG Tag DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3122/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. Multiple malicious IMG tags may cause a denial of services to users who view webpages they are embedded...
Brian Dorricott MAILTO 1.0.7-9 Unauthorized Mail Server Use Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in MAILTO which could allow an...
openSUSE Security Update : opera (openSUSE-SU-2010:0370-1)
Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...
HackerOne: javascript: and mailto: links are allowed on users' profiles
For user's Profile settings, you accept website URLs like mailto:[email protected] and even javascript:alert1. The Content Security Policy directive in Chrome catches the JavaScript one, but older browsers will almost certainly execute the code, allowing for session stealing or XSS code execution...
CentOS Update for evolution CESA-2013:0516 centos6
Check for the Version of evolution OpenVAS Vulnerability Test CentOS Update for evolution CESA-2013:0516 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for evolution CESA-2013:0516 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DEBIAN-CVE-2011-3201
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
CVE-2011-3201
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
Code injection
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
CVE-2011-3201
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
CVE-2011-3201
CVE-2011-3201 affects GNOME Evolution prior to 3.2.3. The vulnerability allows a user-assisted remote attacker to read arbitrary files by injecting a crafted attachment parameter into a mailto: URL, causing the file to be attached to a new message. Exploitation details are described in Red Hat/Ce...
CVE-2011-3201
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
RHEL 6 : evolution (RHSA-2013:0516)
Updated evolution packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
evolution: mailto URL scheme attachment header improper input validation
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...
PT-2013-1408 · Gnome +3 · Gnome Evolution +3
Name of the Vulnerable Software and Affected Versions: GNOME Evolution versions prior to 3.2.3 Description: The issue allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a "mailto:" URL, which attaches the file to the email. This enables attackers to acce...
Cross site scripting
Cross-site scripting XSS vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link...