4279 matches found
CVE-2006-0893
NOCC Webmail 1.0 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting files in (1) the profiles directory (exposing e-mail addresses from profile filenames) and (2) the tmp directory (revealing uploaded attachment names). T...
iGENUS WebMail 2.0.2 - config_inc.php Remote Code Execution
iGENUS WebMail 2.0.2 - configinc.php Remote Code Execution !/usr/bin/perl use IO::Socket; print "\r\n"; print "iGENUS WebMail works against PHP5 with registerglobals = On\r\n"; print " & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site:...
NOCC <= 1.0 Multiple Vulnerabilities
The remote host is running NOCC, an open source webmail application written in PHP. The installed version of NOCC is affected by a local file include flaw because it fails to sanitize user input to the 'lang' parameter of the 'index.php' script before using it to include other PHP files. Regardle...
iGENUS WebMail <= 2.0.2 (config_inc.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print "\r\n"; print "iGENUS WebMail = 2.0.2 remote commads xctn\r\n"; print "- works against PHP5 with registerglobals = On\r\n"; print " & allowurlfopen = On\r\n"; print "by rgod rgodATautisticiDOTorg\r\n"; print "site:...
iGENUS WebMail <= 2.0.2 (config_inc.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== iGENUS WebMail works against PHP5 with registerglobals = On\r\n"; print " & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "dork: intitle:"igenus...
iGENUS WebMail 2.0.2 - 'config_inc.php' Remote Code Execution
!/usr/bin/perl use IO::Socket; print "\r\n"; print "iGENUS WebMail works against PHP5 with registerglobals = On\r\n"; print " & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n\r\n"; print "dork: intitle:"igenus webmail login"\r\n";...
Cross site scripting
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...
NOCC Webmail <= 1.0 multiple vulnerabilities
------ NOCC Webmail = 1.0 multiple arbitrary local inclusion + ---------------- php injection - remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ descriptio...
CVE-2006-0188
SquirrelMail webmail 1.4.0–1.4.5 is affected by CVE-2006-0188 (and related CVEs listed in advisory DSA-988-1/CESA-2006:0283), allowing remote attackers to inject arbitrary HTML via the right_frame parameter in webmail.php. Debian/Red Hat/CentOS advisories recommend upgrading to SquirrelMail 1.4.6...
NOCC 1.0 - error.php?html_error_occurred Cross-Site Scripting
NOCC 1.0 - error.php?htmlerroroccurred Cross-Site Scripting source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can explo...
NOCC 1.0 - filter_prefs.php?html_filter_select Cross-Site Scripting
NOCC 1.0 - filterprefs.php?htmlfilterselect Cross-Site Scripting source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can...
NOCC 1.0 - no_mail.php?html_no_mail Cross-Site Scripting
NOCC 1.0 - nomail.php?htmlnomail Cross-Site Scripting source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit the...
NOCC Webmail 1.0 - Local File Inclusion Remote Code Execution
NOCC Webmail 1.0 - Local File Inclusion Remote Code Execution works regardless of any magicquotesgpc settings dork: "powered by nocc" intitle:"NOCC Webmail" -site:sourceforge.net -Zoekinalles.nl -analysis Sun-Tzu: "Knowing the place and the time of the coming battle, we may concentrate from the...
NOCC 1.0 - 'no_mail.php?html_no_mail' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject arbitrary PHP code and execute it ...
NOCC 1.0 - 'error.php?html_error_occurred' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject arbitrary PHP code and execute it ...
NOCC 1.0 - 'filter_prefs.php?html_filter_select' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject arbitrary PHP code and execute it ...
NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution
works regardless of any magicquotesgpc settings dork: "powered by nocc" intitle:"NOCC Webmail" -site:sourceforge.net -Zoekinalles.nl -analysis Sun-Tzu: "Knowing the place and the time of the coming battle, we may concentrate from the greatest distances in order to fight" / short explaination: we...
CVE-2006-0793
frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0794
help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Information disclosure
frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...