5045 matches found
Roundcube Webmail 0.1 - index.php Cross-Site Scripting
Roundcube Webmail 0.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21042/info Roundcube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...
CVE-2006-5712
Cross-site scripting XSS vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated using the width style for an IMG element...
CVE-2006-5712
Cross-site scripting XSS vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated using the width style for an IMG element...
CVE-2006-5712
Technical details (affected product/version, root cause, impact, or remediation) are not publicly provided in the connected documents for CVE-2006-5712. Monitor for updates.
CVE-2006-5712: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated using the width style for an IMG element...
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...
CVE-2006-5486
CVE-2006-5486: Cross-site scripting in Webmail of Sun Java System Messaging Server 6.0–6.2 and iPlanet Messaging Server 5.2. Remote attackers can trigger arbitrary Javascript via crafted e-mails. Affected: Webmail component of Sun/ iPlanet Messaging Server. Root cause described as XSS via crafted...
CVE-2006-5486
Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...
CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit
No description provided by source. !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your AnyImage.gif. When...
CVE-2006-5486: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...
CVE-2006-5386
PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULTSKIN parameter...
CVE-2006-5386
PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULTSKIN parameter...
CVE-2006-5386
Summary of CVE-2006-5386: A PHP remote file inclusion in the NuralStorm Webmail project (versions 0.98b and earlier) can allow an attacker to execute arbitrary PHP code. This occurs when register_globals is enabled and an attacker supplies a URL in the DEFAULT_SKIN parameter that is processed by ...
CVE-2006-5386: Undefined Security Weakness
PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULTSKIN parameter...
NuralStorm Webmail 0.98b - 'process.php' Remote File Inclusion
--------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== NuralStorm Webmail = 0.98b process.php Remote Include Vulnerability ======================================================================...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
NuralStorm Webmail <= 0.98b Remote File Include Vulnerability
--------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...
NuralStorm Webmail 0.98b - process.php Remote File Inclusion
NuralStorm Webmail 0.98b - process.php Remote File Inclusion --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn...
Debian DSA-988-1 : squirrelmail - several vulnerabilities
Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0188 Martijn Brinkers and Ben Maurer found a flaw in webmail.php that allows remote attackers to inject...