CVE-2007-3058

Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter to 1 calendar.php, 2 compose.php, and 3 index.php, different vectors than CVE-2007-2826. NOTE: the provenance of this informati...

CVE-2007-3058

Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter to 1 calendar.php, 2 compose.php, and 3 index.php, different vectors than CVE-2007-2826. NOTE: the provenance of this informati...

CVE-2007-3058

CVE-2007-3058 affects Madirish Webmail 2.0 (lib/addressbook.php). The flaw is a PHP remote file inclusion via a URL in the GLOBALS[basedir] parameter, exploitable through multiple pages (calendar.php, compose.php, index.php). The description in the sources confirms a remote code execution vector,...

Madirish Webmail 2.0 (addressbook.php) Remote File Inclusion Vuln

No description provided by source. Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail code:...

Madirish Webmail 2.0 (addressbook.php) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= Madirish Webmail 2.0 addressbook.php Remote File Inclusion Vuln ================================================================= Madirish Webmail v2.0 Remote File Include...

Madirish Webmail 2.0 - addressbook.php Remote File Inclusion

Madirish Webmail 2.0 - addressbook.php Remote File Inclusion Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail code:...

Madirish Webmail 2.0 - 'addressbook.php' Remote File Inclusion

Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail code: requireonce$GLOBALS'basedir'."lib/sql.php" exploit:...

UebiMiau Multiple Input Validation Vulnerabilities

The remote host is running UebiMiau, a webmail application written in PHP. The version of UebiMiau installed on the remote host fails to sanitize user input to the 'selectedtheme' parameter of the 'error.php' script before using it as a template to generate dynamic HTML. An unauthenticated attack...

[Full-disclosure] Uebimiau Webmail Multiple Vulnerabilities

Synopsis: Multiple Vulnerabilities Introduction: Uebimiau is an open source webmail interface. Details: Uebimiau doesn't correctly handle the $GET array in error.php. Many vulnerabilities have been already discovered, but I would like to introduce few new ones: 1 XSS 2 Three Web Server Directory...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter...

CVE-2007-2826

PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter...

CVE-2007-2826

CVE-2007-2826 describes a PHP remote file inclusion vulnerability in Madirish Webmail 2.0, specifically in lib/addressbook.php, where an attacker can cause arbitrary PHP code execution by supplying a crafted URL via the GLOBALS[basedir] parameter. This impacts Madirish Webmail 2.0 and is triggere...

Madirish Webmail AddressBook.PHP远程文件包含漏洞

Madirish Webmail是一款基于PHP的WEB应用程序。 Madirish Webmail不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'AddressBook.PHP'脚本对用户提交的'GLOBALSbasedir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Madirish Webmail 2.0 http://sourceforge.net/projects/madirishwebmail...

RHEL 3 / 4 / 5 : squirrelmail (RHSA-2007:0358)

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Several HTML...

Madirish Webmail v2.0 Remote File Include Vulnerabilities

Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail vuln code: requireonce$GLOBALS'basedir'."lib/sql.php" exploit:...

Cross site scripting

Cross-site scripting XSS vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-2745

Cross-site scripting XSS vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-2745

CVE-2007-2745 is a cross-site scripting (XSS) vulnerability in printcal.pl of vDesk Webmail 4.03. The vulnerability arises from unsafely handling the type parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected software is described as vDesk Webmail 4.03; no explicit...

CVE-2007-2718

Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...