EUVD-2012-4003

Malware in sbrugna...

EUVD-2012-4002

Malware in sbrugna...

CVE-2012-4059

Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...

CVE-2012-4058

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...

CVE-2012-4059

CVE-2012-4059 describes a CSRF vulnerability in SocketMail Pro 2.2.9 affecting the endpoint home/secretqtn.php where an attacker can hijack the authenticated user’s session to change security questions and answers via an upd action. The vulnerability arises from CSRF exposure that allows changing...

CVE-2012-4058

CVE-2012-4058 affects SocketMail Pro 2.2.9 and is a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML via the subject of an email. The referenced sources corroborate the description but do not provide additional exploitation details in the con...

CVE-2012-4059

Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...

SocketMail Pro 2.2.9 Cross Site Request Forgery / Cross Site Scripting

Title:SocketMail Pro version 2.2.9 CSRF Cross Site Request Forgery && XSS Cross Site Scripting Author:MetaiZm Software:SocketMail Pro version 2.2.9 Website:http://socketmail.com/ Tested on:Windows XP SP3 Description : Subject xss codes inject and email send - Screen :...