Code injection

The Web Email Protection component in Symantec Encryption Management Server aka PGP Universal Server before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL...

CVE-2014-1643

The Web Email Protection component in Symantec Encryption Management Server aka PGP Universal Server before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL...

Symantec Encryption Management Server Web Email Protection View User’s Email

SUMMARY Symantec Encryption Management Server was susceptible to an authorized/authenticated web console user being able to view any other users stored outbound emails. The issue is in the Web Email Protection component not sufficiently restricting authorized user content access. This could allow...

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

Symantec Encryption Management Server Web Email Protection XSS

SUMMARY Symantec's Encryption Management Server, previously PGP Universal Server, is susceptible to a cross-site scripting XSS issue, in the web management interface of the server. The XSS issue is in the Web Email Protection component. This issue could allow an authenticated Web Email Protection...

AlstraSoft Web Email Script Enterprise SQL Injection

--AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE" --Dork2: AlstraSoft Web Email Script...

CVE-2008-5751

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5751

CVE-2008-5751 is a SQL injection vulnerability in index.php of AlstraSoft Web Email Script Enterprise (ESE). The issue arises from unsafely handling the id parameter in a directory action, allowing remote attackers to inject SQL and execute arbitrary commands against the backend database. This en...

CVE-2008-5751

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

AlstraSoft Web Email Script Enterprise 'id'参数SQL注入漏洞

BUGTRAQ ID: 33033 CNCAN ID：CNCAN-2008123001 AlstraSoft Web Email Script Enterprise是一款基于PHP的WEB应用程序。 AlstraSoft Web Email Script Enterprise不正确处理用户参数，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对'id'参数缺少过滤，构建恶意的SQL查询作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息或操作数据库。 AlstraSoft Web Email Script Enterprise 厂商解决方案...

AlstraSoft Web Email Script Enterprise (id) SQL Injection Vuln

No description provided by source. --AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE"...

Alstrasoft Web Email Script Enterprise - id SQL Injection

Alstrasoft Web Email Script Enterprise - id SQL Injection --AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork:...

Alstrasoft Web Email Script Enterprise - 'id' SQL Injection

--AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE" --Dork2: AlstraSoft Web Email Script...

Mike's World Mail Machine Mailmachine.CGI本地文件包含漏洞

BUGTRAQ ID: 24852 CNCAN ID:CNCAN-2007071105 Mike's World Mail Machine是一款WEB EMAIL服务程序。 Mike's World Mail Machine不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是mailmachine.cgi脚本中的open函数不正确过滤用户提交的输入，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 Mail Machine Mail Machine 3.989 Mail Machine Ma...

AeroMail multiple vulnerabilities

AeroMail multiple vulnerabilities PROGRAM: AeroMail VENDOR: Mark Cushman [email protected] HOMEPAGE: http://the.cushman.net/projects/aeromail/ MIRROR: http://www.packetplay.com/projects/aeromail/ VULNERABLE VERSIONS: all versions below 1.45 SEVERITY: medium to high DESCRIPTION: "AeroMail is a...

Web-based email services filtering systems vulnerable to malicous script execution

Overview An attacker can send a specially crafted email message to a victim containing malicious scripting JavaScript, VBScript, JScript, etc., or potentially HTML. When a victim views the message with scripting enabled, the victim's browser will then interpret this javascript which can lead to...