[SECURITY] Fedora 11 Update: imp-4.3.6-1.fc11

IMP is the Internet Messaging Program, one of the Horde applications. It provides webmail access to IMAP and POP3 accounts. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information including help with IMP please visit http://www.horde.org...

Uebimiau Webmail 2.7.2 Cross Site Scripting / Path Disclosure

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Uebimiau Webmail <= 2.7.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================== Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

CVE-2009-4743

CVE-2009-4743 affects AfterLogic WebMail Pro versions up to 4.7.10, via XSS in history-storage.aspx. The vulnerability is triggered by specially crafted HistoryStorageObjectName and HistoryKey parameters, allowing remote attackers to inject arbitrary web script/HTML and execute in the victim’s br...

CVE-2009-4743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 HistoryStorageObjectName and 2 HistoryKey parameters...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau...

Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability ============================================================ Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau Webmail v3.2.0-2.0" Vuln:...

Uebimiau Webmail 3.2.0-2.0 Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure Examples: E.g.1 http://www.rufino.eti.br/webmail/inc/database/...

Fedora Update for roundcubemail FEDORA-2010-1385

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2010-1385 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for roundcubemail FEDORA-2010-1399

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2010-1399 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities &#40;reversible encryption + weak ACL&#41;

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...

Horde IMP Information Disclosure Vulnerability

This host is running Horde IMP and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbhordeimpinfodiscvuln.nasl 5820 2017-03-31 11:20:49Z cfi $ Horde IMP Information Disclosure Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

ExtMail1.2 邮件系统跨站脚本漏洞（3P）

北洋贱队2009.12.31首发 Extmail 是一个以perl语言编写，面向大容量/ISP级应用，免费的高性能Webmail软件。 最新版本为1.2，检测出三出处跨站漏洞。 1.免费新用户注册的"signup.cgi"对‘domain’参数未进行参数过滤，构建恶意脚本代码作为参数数据，并诱使用户访问恶意链接，可触发恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 demo:http://demo.extmail.org/extman/cgi/signup.cgi?domain=%22%3E%3Ciframe%20src=http://www.gohack.org%3E...

[SECURITY] Fedora 12 Update: roundcubemail-0.3.1-2.fc12

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...