CVE-2017-7413

In HordeCrypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email...

RoundCube Webmail mail <1.0.5 body stored XSS（CVE-2015-1433）

RoundCube Webmail is a foreign use of a wide an open source php e-mail system, the meaning is still quite large. roundcube webmail official website: , download the latest version. /program/lib/Roundcube/rcubewashtml.php this file is actually a rich text filter class class rcubewashtml it. roundcu...

Debian DLA-855-1 : roundcube security update

Roundcube, a webmail solution for IMAP servers, was susceptible to a cross-site-scripting XSS vulnerability via a crafted Cascading Style Sheets CSS token sequence within an SVG element or HTML message. For Debian 7 'Wheezy', these problems have been fixed in version 0.7.2-9+deb7u6. We recommend...

[SECURITY] [DLA 855-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u6 CVE ID : CVE-2017-6820 Debian Bug : 857473 Roundcube, a webmail solution for IMAP servers, was susceptible to a cross-site-scripting XSS vulnerability via a crafted Cascading Style Sheets CSS token sequence within an SVG element or HTML message. For...

SMTP STS Coming Soon to Gmail, Other Webmail Providers

Gmail users can expect the introduction of SMTP Strict Transport Security to the email service some time this year, bringing a measure of security similar to certificate pinning to one of the world’s biggest webmail services. Elie Bursztein, the head of Google’s anti-abuse research team, said at...

webmail.koreapop.com XSS vulnerability

Vulnerable URL: http://webmail.koreapop.com/browse/search.php?mode=store=--%3E%3C/script%3E%3C/title%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions Vulnerability

Exploit for php platform in category web applications Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Webmail Ultimate Edition v4.0 Script Version: Ultimate Edition v4.0, Ultimate Hypertable Version Script Buy Now:...

Multiple Cross-Site Request Forgery Vulnerabilities in Zimbra

Zimbra is an open source collaborative office suite that includes WebMail, calendar, address book, Web document management and authoring. Zimbra suffers from multiple cross-site request forgery vulnerabilities that allow remote attackers to construct malicious URIs, trick users into parsing them,...

Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions

Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Webmail Ultimate Edition v4.0 Script Version: Ultimate Edition v4.0, Ultimate Hypertable Version Script Buy Now...

Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions

Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Webmail Ultimate Edition v4.0 Script Version: Ultimate Edition v4.0, Ultimate Hypertable Version Script Buy Now: http://www.inoutscripts.com/demo/inout-webmail/demo/ Author: İhsan Şenc...

Rumble Mail Server 0.51.3135 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit title: Rumble Mail Server v/0.51.3135 = Stored Cross Site Scripting Download Software: https://sourceforge.net/projects/rumble/?source=directory Author: Nassim Asrir Author Company: Henceforth Contact: email protected Tested On:...

Roundcube: Arbitrary code execution

Background Free and open source webmail software for the masses, written in PHP. Description Roundcube, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line. Impact An authenticated...

Horde Groupware and Horde Groupware Webmail Cross-Site Scripting Vulnerabilities

Horde Groupware and Horde Groupware Webmail Edition are both products of Horde Corporation, USA.Horde Groupware is a free browser based on the Collaboration Suite.Horde Groupware Webmail is a free enterprise browser based on the Communication Suite. Horde Text Filter API is one of the methods for...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-13003)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in versions of Roundcube Webmail prior to 1.2.0. A remote attacker can exploit this vulnerability to inject...

CVE-2016-5303

Cross-site scripting XSS vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form 1 action or 2 xlink attribute...

CVE-2016-5303

Cross-site scripting XSS vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form 1 action or 2 xlink attribute...

Cross site scripting

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

UBUNTU-CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

DEBIAN-CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...