5045 matches found
CVE-2010-3564: Undefined Security Weakness
Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...
CVE-2010-3564
Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...
OpenJDK kerberos vulnerability (6958060)
Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...
PT-2010-4925
Name of the Vulnerable Software and Affected Versions Oracle Communications Messaging Server Sun Java System Messaging Server version 7.0 Description The issue affects confidentiality and integrity, and it is related to Webmail. Details about the vulnerability are not fully disclosed, but it may...
OverLook Cross-site Scripting Vulnerability
ANATOLIA SECURITY ADVISORY --------------------------- ADVISORY INFO + Title: OverLook Cross-site Scripting + Advisory URL: http://anatoliasecurity.com/Blog/Detay.aspx?bId=2 + Advisory ID: 2010-002 + Version: v5.0 + Date: 06/10/2010 + Impact: Execute Malicious Javascript Codes + CWE-ID: 79 +...
IMP Webmail stored cross-site scripting vulnerability and fixes-vulnerability warning-the black bar safety net
Affected version: Horde IMP 4.3.7 vulnerability description: BUGTRAQ ID: 4 3 5 1 5 IMP is a Web-based powerful e-mail program, by the Horde project group developed, can be used in Linux/Unix or Windows operating system. IMP Webmail is not correctly filtered submitted to the fetchmailprefs. php...
Uebimiau Webmail 'stage' Parameter Local File Include Vulnerability
Uebimiau Webmail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
NetWin Surgemail XSS vulnerability
Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer [email protected] Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input...
Uebimiau Webmail 3.2.0-2.0 Local File Inclusion Vulnerability
Exploit for php platform in category web applications ============================================================= Uebimiau Webmail 3.2.0-2.0 Local File Inclusion Vulnerability ============================================================= Exploit Title: Uebimiau Webmail Local File Inclusion Date...
Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion
Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage parameter is not properly sanitized...
Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion
Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp...
Uebimiau Webmail 3.2.0-2.0 Local File Inclusion
Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage parameter is not properly sanitized...
Horde IMP Webmail fetchmailprefs.php存储式跨站脚本漏洞
BUGTRAQ ID: 43515 IMP是一款基于Web的强大的邮件程序，由Horde项目组开发，可使用在Linux/Unix或者Windows操作系统下。 IMP Webmail没有正确地过滤提交给fetchmailprefs.php脚本的fmid URL参数，远程攻击者可以通过提交恶意URL请求执行存储式跨站脚本攻击。当用户访问邮件获取偏好页面时就会执行所注入的代码。 Horde IMP 4.3.7 厂商补丁： Horde ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Atmail WebMail < 6.2.0 (6.20) 'MailType' Parameter XSS
According to its version, the Atmail WebMail install on the remote host is earlier than 6.2.0 6.20. Such versions are affected by a cross-site scripting vulnerability because they fail to sanitize the 'MailType' parameter before using it to generate dynamic HTML content. An unauthenticated, remot...
Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability
Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...
Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability
Horde IMP Webmail is prone to an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection
Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML ...
Horde IMP Webmail 4.3.7 - 'fetchmailprefs.php' HTML Injection
source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected...
[ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail < v6.2.0
============================================= INTERNET SECURITY AUDITORS ALERT 2010-009 - Original release date: August 30th, 2010 - Last revised: September 21st, 2010 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored ============================================= I...
Atmail WebMail Cross Site Scripting
============================================= INTERNET SECURITY AUDITORS ALERT 2010-009 - Original release date: August 30th, 2010 - Last revised: September 21st, 2010 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored ============================================= I...