V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion

Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford Vulnerable File v-webmail/includes/pear//.php = requireonce...

CVE-2006-0793

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0794

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Information disclosure

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Design/Logic Flaw

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0794

CVE-2006-0794 affects V-webmail 1.6.2 via help.php, where remote attackers can obtain the installation path through unspecified invalid parameters. The available documents describe a path-disclosure issue but do not provide detailed root-cause analysis, exploited vectors, or concrete mitigation s...

CVE-2006-0793

CVE-2006-0793 concerns V-webmail 1.6.2. The vulnerability is in frameset.php, where a remote attacker can trigger phishing by supplying arbitrary websites in the rframe parameter. The exploit details and exact impact are described only as phishing via rframe; no further root-cause specifics or af...

CVE-2006-0794

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

CVE-2006-0792 : The vulnerability affects V-webmail 1.6.2 in the page preferences.personal.php where the newid parameter can be exploited to inject arbitrary web script or HTML (reflected XSS). This is a client-side script injection issue that could allow an attacker to execute JavaScript in the ...

[SA18776] V-webmail Cross-Site Scripting and Path Disclosure

TITLE: V-webmail Cross-Site Scripting and Path Disclosure SECUNIA ADVISORY ID: SA18776 VERIFY ADVISORY: http://secunia.com/advisories/18776/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: V-webmail 1.x...

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these...

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...