CVE-2018-15510

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15512

Cross-site scripting XSS vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

Design/Logic Flaw

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role...

Cross site scripting

Cross-site scripting XSS vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-15510

The vulnerability CVE-2018-15510 affects totemomail 6.0.0 build 570 in the Certificate feature, where an XSS flaw allows remote attackers to inject arbitrary web script or HTML. Documents indicate the issue is real but do not provide exploit details, affected versions beyond the specific build, i...

CVE-2018-15513

CVE-2018-15513 affects totemomail 6.0.0 build 570 where the log viewer API/feature enables access to session IDs of high-privilege users by abusing access granted to a read-only auditor role. The underlying cause is not detailed beyond this access path; the impact is exposure of sensitive session...

CVE-2018-15513

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role...

CVE-2018-15512

CVE-2018-15512 concerns a cross-site scripting (XSS) vulnerability in the Authorisation Service feature of totemomail version 6.0.0 build 570 . The issue allows remote attackers to inject arbitrary web script or HTML. Documented across multiple sources (NVD/CNVD/etc.) with the same description; n...