Netwin SurgeFTP 2.3a1 SurgeFTPMGR.CGI Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21534/info Netwin SurgeFTP is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the...

NetWin DMail 2.7/2.8 ETRN Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary commands as roo...

netwin netauth 4.2 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page' variab...

NetWin SurgeMail Webmail Server page Parameter Format String - Ver2 (CVE-2008-1055)

A format string vulnerability has been reported in NetWin SurgeMail and WebMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-4742

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...

CVE-2013-4742

CVE-2013-4742 describes a buffer overflow in SurgeFTP Server (NetWin SurgeFTP) prior to version 23d2 triggered during authentication by a long string in the request. The effect is a denial of service (crash) and potentially arbitrary code execution via memory corruption on heap/stack. Root cause:...

CVE-2013-4742

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...

Netwin SurgeFTP Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netwin SurgeFTP...

Netwin SurgeFTP - Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netwin SurgeFTP...

Netwin SurgeFTP Remote Command Execution

This module exploits a vulnerability found in Netwin SurgeFTP, version 23c8 or prior. In order to execute commands via the FTP service, please note that you must have a valid credential to the web-based administrative console. Module Options msf use exploit/multi/http/netwin/surgeftpexec msf...

Cross site scripting

Cross-site scripting XSS vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message...

CVE-2012-2575

NetWin SurgeMail 6.0a4 is affected by a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message. This is triggered by HTML emails, enabling script execution in som...

Surgemail 6.0a4 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: SurgeMail Version: 6.0a4 Vendor Site: http://www.netwinsite.com Software Download: http://netwinsite.com/download.htm Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosu...

Surge-FTP 23b6 Cross Site Scripting

Exploit Title : Surge-FTP v23b6 Admin multiple reflected XSS Vulnerabilities Authored by : Houssam Sahli = backtronuxgmailcom Date : 16/08/2011 Vendor: NetWin Product web page: http://netwinsite.com download link : http://netwinsite.com/ftp/surgeftp/surgeftp23b6windows.exe Affected version: v23b6...

SurgeMail SurgeWeb Cross Site Scripting Vulnerability

The host is running SurgeMail and is prone to Cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsurgemailsurgewebxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SurgeMail SurgeWeb Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

CVE-2010-3201

Cross-site scripting XSS vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the usernameex parameter to the surgeweb program...

Cross site scripting

Cross-site scripting XSS vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the usernameex parameter to the surgeweb program...

CVE-2010-3201

The CVE-2010-3201 entry concerns NetWin Surgemail (SurgeMail) SurgeWeb Cross‑Site Scripting (XSS) via the username_ex parameter. The vulnerability is described as a remote XSS that allows an attacker to inject arbitrary script/HTML in the SurgeWeb login page, potentially stealing cookies or hijac...

CVE-2010-3201

Cross-site scripting XSS vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the usernameex parameter to the surgeweb program...

NetWin Surgemail XSS vulnerability

Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer [email protected] Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input...