5061 matches found
Basilix Webmail 1.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2995/info Basilix is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. During operation, Basilix opens a PHP include file using a variable as the...
Roundcube Webmail 0.1 CSS Expression Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26800/info Roundcube Webmail is prone to an input-validation vulnerability because it fails to sanitize HTML email messages. Attackers can exploit this issue to execute arbitrary script code in the browser of an...
A-V Tronics InetServ 3.0 WebMail Long GET Request Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses t...
Uebimiau Webmail 3.2.0-2.0 - Email Disclosure
No description provided by source. Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: Uebimiau Webmail...
AfterLogic WebMail Pro 4.7.10 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...
Kerio Mailserver 5.6.3 list Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
NeoSys Neon Webmail for Java 5.06/5.07 updateuser Servlet in_name Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an...
NeoSys Neon Webmail for Java 5.06/5.07 updatemail Servlet Arbitrary Mail Message Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an...
V-webmail 1.6.4 includes/email.list.search.php CONFIG[includes] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...
Yet Another NOCC <= 0.1.0 - Local File Inclusion Vulnerability
No description provided by source. Yet Another NOCC 0.1.0 = Local File Inclusion Vulnerabilities YANOCC is a simple and fast webmail client which can handle POP3, SMTP, and IMAP servers. YANOCC is based on NOCC's code and is written with PHP4. It features multi-language support, MIME attachments,...
Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists in the code which handles GET...
NOCC 1.0 error.php html_error_occurred Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject...
KMMail 1.0 E-Mail HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6013/info kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script code...
Captaris Infinite WebMail 3.61.5 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6411/info An HTML injection vulnerability has been discovered in Captaris Infinite WebMail. Due to insufficient sanitization of HTML content, it is possible for an attacker to embed malicious script code into HTML email...
IMHO Webmail 0.9x Account Hijacking Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5238/info A vulnerability has been reported in the IMHO Roxen webmail module which may enable a malicious user of the webmail system to gain access to the account of another user. This issue is due to an error in...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with Generate HTML for all fields enabled, stores...
AfterLogic WebMail Lite PHP 7.0.1 - CSRF Vulnerability
No description provided by source. 1. 2. 3. + Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin...
BasiliX Webmail 1.1 Email Header HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker ca...
BasiliX Webmail 1.1 Message Content Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX Webmail. Script...