8 matches found
CVE-2022-31200
Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...
PT-2023-13028
Name of the Vulnerable Software and Affected Versions Atmail version 5.62 Description The issue allows for XSS via the "mail/parse.php" endpoint, specifically through the Search Terms field when accessing the URL with parameters such as...
CVE-2022-31200: Improper Neutralization of Input During Web Page Generation
Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...
CVE-2022-31200
The CVE-2022-31200 issue affects Atmail 5.62 and is described as a cross-site scripting (XSS) vulnerability exploitable via the mail/parse.php file with crafted URL parameters (html/$this->Language/help/filexp.html&FirstLoad=1&HelpFile=file.html). Multiple connected sources corroborate a vulne...
CVE-2022-31200
Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...
CVE-2022-31200
Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field...
CVE-2008-4045
Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...
CVE-2008-4045: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...