4287 matches found
CVE-2012-2593
The connected documentation confirms a concrete issue: Atmail Webmail Server 6.4 has an XSS vulnerability in its administrative interface that can be triggered via the Date field of an email, enabling attackers to inject arbitrary script/HTML. Exploitation is evidenced by linked exploit-publicati...
IceWarp Webmail Server color Cross-Site Scripting Vulnerability
IceWarp Webmail Server is a WEB mail server. IceWarp Webmail Server color handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Date: 2020-01-27 Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Date: 2020-01-27 Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method Google Dork: inurl:/webmail/ intext:Powered by IceWarp Server...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method Google Dork:...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
Code injection
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
IceWarp WebMail Server =11.4.4.2 or apply the vendor patch. Public exploits/poC references (e.g., Exploit-DB entry 47988) indicate real-world testing of the vulnerability. No details on successful exploitation in the provided docs beyond the XSS description. Recommend applying the vendor patch or...
webmail.tenmillion.co.th Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076524 Security Researcher MertC Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting webmail.tenmillion.co.th website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...
webmail.inetspace.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076295 Security Researcher MertC Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting webmail.inetspace.net website and its users. Following coordinated and responsible vulnerability disclosure guidelines of th...
IceWarp WebMail 11.4.4.1 Cross Site Scripting
Title: IceWarp WebMail Cross-Site Scripting Vulnerability + Date: 2020/01/27 + Author: Lutfu Mert Ceylan + Vendor Homepage: www.icewarp.com + Tested on: Windows 10 + Versions: 11.4.4.1 and before + Vulnerable Parameter: "color" Get Method + Vulnerable File: /webmail/ + Dork : inurl:/webmail/...
IceWarp WebMail Server Cross-Site Scripting Vulnerability (CNVD-2020-02978)
IceWarp WebMail Server is a Web-based mail server product from the U.S. company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in object annotations in IceWarp WebMail Server version 12.2.0 and...
IceWarp WebMail Server Cross-Site Scripting Vulnerability
IceWarp WebMail Server is a Web-based mail server product from the U.S. company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in IceWarp WebMail Server version 12.2.0 and version 12.1.x prior to...
CVE-2019-19265
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...
CVE-2019-19265
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...
Cross site scripting
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...