Uebimiau Webmail <= 2.7.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================== Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

CVE-2009-4743 affects AfterLogic WebMail Pro versions up to 4.7.10, via XSS in history-storage.aspx. The vulnerability is triggered by specially crafted HistoryStorageObjectName and HistoryKey parameters, allowing remote attackers to inject arbitrary web script/HTML and execute in the victim’s br...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability ============================================================ Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email...

Uebimiau Webmail 3.2.0-2.0 Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure Examples: E.g.1 http://www.rufino.eti.br/webmail/inc/database/...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau Webmail v3.2.0-2.0" Vuln:...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau...

Fedora Update for roundcubemail FEDORA-2010-1399

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2010-1399 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for roundcubemail FEDORA-2010-1385

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2010-1385 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities &#40;reversible encryption + weak ACL&#41;

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...

Horde IMP Information Disclosure Vulnerability

This host is running Horde IMP and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbhordeimpinfodiscvuln.nasl 5820 2017-03-31 11:20:49Z cfi $ Horde IMP Information Disclosure Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

ExtMail1.2 邮件系统跨站脚本漏洞（3P）

北洋贱队2009.12.31首发 Extmail 是一个以perl语言编写，面向大容量/ISP级应用，免费的高性能Webmail软件。 最新版本为1.2，检测出三出处跨站漏洞。 1.免费新用户注册的"signup.cgi"对‘domain’参数未进行参数过滤，构建恶意脚本代码作为参数数据，并诱使用户访问恶意链接，可触发恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 demo:http://demo.extmail.org/extman/cgi/signup.cgi?domain=%22%3E%3Ciframe%20src=http://www.gohack.org%3E...

[SECURITY] Fedora 12 Update: roundcubemail-0.3.1-2.fc12

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2010-0464

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2010-0464

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...