4838 matches found
Code injection
The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basicwebmail" permission to read arbitrary users' email addresses...
CVE-2012-5570
The CVE-2012-5570 entry concerns Drupal's Basic webmail module (6.x-1.x) prior to 6.x-1.2. The vulnerability allows remote authenticated users with the access basic_webmail permission to read arbitrary users’ email addresses, constituting an information-disclosure flaw. Root cause details are not...
CVE-2012-5570
The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basicwebmail" permission to read arbitrary users' email addresses...
CVE-2012-5570: Exposure of Sensitive Information to an Unauthorized Actor
The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basicwebmail" permission to read arbitrary users' email addresses...
Drupal Basic webmail information disclosure vulnerability
Drupal is an open source CMS that can be used as a content management platform for various websites. An information disclosure vulnerability exists in Drupal Basic webmail version 6.x-1.x prior to 6.x-1.2, which can be exploited by a remote attacker with access to basicwebmail to read the email...
CVE-2012-2593
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
Cross site scripting
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
CVE-2012-2593
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
CVE-2012-2593
The connected documentation confirms a concrete issue: Atmail Webmail Server 6.4 has an XSS vulnerability in its administrative interface that can be triggered via the Date field of an email, enabling attackers to inject arbitrary script/HTML. Exploitation is evidenced by linked exploit-publicati...
CVE-2012-2593: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email...
IceWarp Webmail Server color Cross-Site Scripting Vulnerability
IceWarp Webmail Server is a WEB mail server. IceWarp Webmail Server color handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method Google Dork:...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Date: 2020-01-27 Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method Google Dork: inurl:/webmail/ intext:Powered by IceWarp Server...
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting Date: 2020-01-27 Author: Lutfu Mert Ceylan Vendor Homepage: www.icewarp.com Tested on: Windows 10 Versions: 11.4.4.1 and before Vulnerable Parameter: "color" Get Method...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
Code injection
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...
CVE-2020-8512
IceWarp WebMail Server =11.4.4.2 or apply the vendor patch. Public exploits/poC references (e.g., Exploit-DB entry 47988) indicate real-world testing of the vulnerability. No details on successful exploitation in the provided docs beyond the XSS description. Recommend applying the vendor patch or...