Cross site scripting

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

CVE-2009-2636

Kerio MailServer WebMail usion page vulnerability CVE-2009-2636 is a cross-site scripting (XSS) flaw in the WebMail integration page. Affects Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0. Exploitation allows an attacker to inject arbitrary web script or HTML via an e-mail message, with impact...

CVE-2009-2636

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

Stored XSS on Communigate Pro 5.2.14 and prior versions

Description The Communigate Pro webmail framework is prone to a stored Cross Site Scripting vulnerability through crafted plain text email messages. - Affected version: 5.2.14 and prior as reported from Communigate: http://www.communigate.com/cgatepro/History52.html - Details This vulnerability...

Communigate Pro Cross Site Scripting

Description The Communigate Pro webmail framework is prone to a stored Cross Site Scripting vulnerability through crafted plain text email messages. - Affected version: 5.2.14 and prior as reported from Communigate: http://www.communigate.com/cgatepro/History52.html - Details This vulnerability...

The latest remote file code execution exploit method-vulnerability warning-the black bar safety net

about them on the Internet search Uebimiau Webmail Address followed by /uebimiau/admin/editor. php? load=config is the person holding the encryption /uebimiau/index. php? cmd=id All is Foreign,,, master can play。。。。。。。 Vulnerability published Time 2 0 0 9 to 6. 1 2...

V-webmail Multiple PHP Remote File Inclusion Vulnerability

V-webmail is prone to Multiple PHP Remote File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

V-webmail Multiple PHP Remote File Inclusion Vulnerability

The host is running V-webmail and is prone to Multiple PHP Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbv-webmailmultfileincvuln.nasl 4906 2017-01-02 13:06:55Z teissa $ V-webmail Multiple PHP Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c...

V-webmail Version Detection

This script detects the installed version of V-webmail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6840

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

CVE-2008-6840

V-Webmail 1.6.4 is vulnerable to multiple PHP remote file inclusion (RFI) via untrusted URLs assigned to CONFIG[pear_dir] and CONFIG[includes] in various includes/*.php files (and related files in includes/pear/). The root cause is unsanitized or unvalidated parameters that allow attackers to sup...

CVE-2008-6840

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

Uebimiau Web-Mail 3.2.0-1.8 File Overwrite

Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |\ ----. | | / \ | || | || | | .| || // \ | . . / \ /...

Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities

No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...

Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite

Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |...

Uebimiau Web-Mail 3.2.0-1.8 - Remote File / Overwrite

Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |\ ----. | | / \ | || | || | | .| || // \ | . . / \ /...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2009:1066 An updated squirrelmail package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SquirrelMail is a...

AXIGEN Webmail < 7.1.0 HTML Body Script Insertion

The version of AXIGEN Webmail running on the remote host is earlier than 7.1.0. Such versions fail to fully sanitize text in the body of email messages. If an attacker can trick a user into opening a specially crafted message using the affected webmail application, this can be leveraged to inject...

RHEL 4 / 5 : squirrelmail (RHSA-2009:1066)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:1066 advisory. SquirrelMail is a standards-based webmail package written in PHP. A server-side code injection flaw was found in the SquirrelMail...