[SECURITY] Fedora 9 Update: squirrelmail-1.4.16-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

快客电邮(QuarkMail)远程命令执行漏洞

快客电邮（QuarkMail）是北京雄智伟业科技公司推出的电子邮件系统，被广泛用于各个领域的电子邮件解决方案，其webmail部分使用perl cgi编写，但是80sec在其系统中发现一个重大的安全漏洞，导致远程用户可以在邮件系统上以当前进程身份执行任意命令，从而进一步控制主机或者系统。 QuarkMail错误地使用perl的open函数以打开文件，实现模板等功能，但是其对用户传入的参数没有做有效的过滤，从而导致一个命令执行漏洞。 登录进入系统之后访问如下URL...

CVE-2008-3061

Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...

Open redirect

Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...

CVE-2008-3060

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...

CVE-2008-3063

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

Design/Logic Flaw

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...

Sql injection

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3061

CVE-2008-3061: Open redirect vulnerability in redirect.php of V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary sites via the to parameter, enabling phishing. Root cause: open redirect due to insufficient redirection validation. No patch/mitigation details are provided in the...

CVE-2008-3061

Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...

CVE-2008-3060

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...

CVE-2008-3060

V-webmail version 1.5.0 is affected by CVE-2008-3060. The vulnerability arises from (1) malformed input on the login page (includes/local.hooks.php) and (2) an invalid session ID, both of which can cause error messages that reveal the installation path. This indicates a potential information disc...

CVE-2008-3063

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3063

The CVE-2008-3063 entry documents a SQL injection vulnerability in V-webmail 1.5.0’s login.php, exploitable via the username parameter to allow remote execution of arbitrary SQL commands. Affected software: V-webmail 1.5.0 (login.php). Root cause: unsafely concatenated user input in the login rou...

Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200501-39. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-25 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200411-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-08 (Squirrelmail)

The remote host is missing updates announced in advisory GLSA 200406-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-01 (horde)

The remote host is missing updates announced in advisory GLSA 200805-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-08 (Squirrelmail)

The remote host is missing updates announced in advisory GLSA 200406-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200411-25 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200411-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...