CVE-2002-1877

The CVE-2002-1877 entry describes a vulnerability in the NETGEAR FM114P where remote attackers can bypass site access restrictions by requesting a URL formed with an IP address instead of a hostname. Affected product: NETGEAR FM114P. The impact is stated as bypassing access controls for web sites...

Microsoft Outlook Web Access crossite scripting

It's possible to inject script into message and to acces username/password...

Outlook Web Access with Exchange 5.5 SP4 XSS

Binary data 3014.prm...

Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179)

Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks 895179 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: System administrators who have servers that are running Outlook Web Access for...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

CVE-2005-0563

Microsoft Outlook Web Access (OWA) for Exchange Server 5.5 contains a cross-site scripting (XSS) vulnerability in the HTML encoding used in Compose New Message, allowing an attacker to cause script execution in the user’s context via a specially crafted email (encoded javascript: URL in an IMG ta...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

Microsoft Exchange Server Outlook Web Access HTML Injection Vulnerability

Description Outlook Web Access is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the affected application of an unsuspecting user in...

Microsoft Outlook Web Access vulnerable to cross-site scripting

Overview Microsoft Outlook Web Access may be vulnerable to cross-site scripting attacks. Description Microsoft Outlook Web Access OWA allows users to access their email accounts on a Microsoft Exchange server from another host through a web browser.Microsoft Outlook Web Access for Exchange Server...

MS05-029: Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (895179)

The remote host is running a version of the Outlook Web Access that is affected by a cross-site scripting flaw. This vulnerability could allow an attacker to convince a user to run a malicious script. If this malicious script is run, it would execute in the security context of the user. Attempts ...

CVE-2004-1788

ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb...

CVE-2005-0420

Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...

CVE-2005-1052

The vulnerability (CVE-2005-1052) affects Microsoft Outlook 2003 and Outlook Web Access 2003, where From header display fails to correctly render comma-separated addresses. This could enable remote email spoofing since the From field may appear to originate from a different address. Root cause: i...

Microsoft Outlook Web Access (OWA) owalogon.asp Redirection Account Enumeration

The remote host is running Microsoft Outlook Web Access OWA 2003. Due to a lack of sanitization of the user input, the remote version of this software is vulnerable to URL injection that can be exploited to redirect a user to a different, unauthorized web server after authenticating to OWA. This...

Exploit Labs Security Advisory 2005.1

------------------------------------------------------------ - EXPL-A-2005-001 exploitlabs.com Advisory 030 - ------------------------------------------------------------ - Microsoft Outlook Web Access - OVERVIEW ======== A vulnerability in Microsoft Outlook Web Access allows malicious attackers ...

CVE-2005-0420

Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...

CVE-2005-0420

The CVE-2005-0420 entry concerns Microsoft Outlook Web Access (OWA) for Exchange. The connected OpenVAS NASL detail shows a concrete vulnerability in OWA 2003 where lack of sanitization of user input enables URL injection via owalogon.asp, allowing a remote attacker to cause a user to be redirect...

Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection

Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attack...

Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection

source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry out convincing phishing attacks...

CVE-2004-0203

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...