CVE-2024-24133

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

CVE-2024-24133

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

CVE-2024-24133

Affected software: Atmail v6.6.0. Vulnerability: SQL injection via the username parameter on the login page. Root cause: improper handling of the username input leading to SQL injection (high/critical impact). CVSSv3.1 metrics indicate: Network attack vector, no privileges required, user interact...

CVE-2024-24133

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

CVE-2023-24648

Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...

CVE-2023-24648

Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...

Cross site scripting

Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...

CVE-2023-24648

Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...

CVE-2023-24648

Zstore v6.6.0 has an XSS vulnerability in the component /index.php. The issue is described as CVSS v3.1 base score 6.1 (Medium) with Network attack vector, low confidentiality/integrity impact, no availability impact; user interaction required. The vulnerability is tied to the /index.php entry po...