CVE-2017-6913

Open-Xchange AppSuite Open-Xchange Webmail before 7.6.3-rev28 is vulnerable to a Cross-site Scripting (XSS) flaw. The issue allows remote attackers to inject arbitrary web script or HTML through the event attribute in a time tag. The vulnerability is associated with the Open-Xchange webmail compo...

CVE-2018-16324

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

Design/Logic Flaw

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

CVE-2018-16324

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

CVE-2018-16324

IceWarp Server 12.0.3.1 and earlier is affected by a cross-site scripting (XSS) vulnerability in the /webmail/ username field. The issue is confirmed in the CVE-2018-16324 entry and corroborated by NVD references, with CVSS Base Scores 4.3 (4.3) and 6.1 (3.0) indicating a network-exposed vulnerab...

cali.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-671911 Description| Value ---|--- Affected Website:| cali.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian DLA-1484-1 : squirrelmail security update

It was discovered that there were a number of Cross Site Scripting XSS vulnerabilities in the squirrelmail webmail client. For Debian 8 'Jessie', these issues has been fixed in squirrelmail version 2:1.4.23svn20120406-2+deb8u3. We recommend that you upgrade your squirrelmail packages. NOTE: Tenab...

Roundcube Webmail < 1.3.7 Enigma Plugin PGP Vulnerability (EFAIL)

Roundcube Webmail is prone to an information disclosure vulnerability in the Enigma Plugin. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

IceWarp WebMail 12.0.3.1 Cross Site Scripting

Title: IceWarp WebMail Cross Site Scripting XSS & Execution Code + Date: 2018/08/13 + Author: Mostafa Gharzi + Team: Maher - CertCC.ir + Vendor Homepage: www.icewarp.com + Tested on: Windows 10 & Kali Linux + Versions: 12.0.3.1 and Before + Vulnerable Parameter: Post Method + Vulnerable File:...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17525)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

gazduire.ro XSS vulnerability

Open Bug Bounty ID: OBB-642856 Description| Value ---|--- Affected Website:| gazduire.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webmail.co.za XSS vulnerability

Open Bug Bounty ID: OBB-638999 Description| Value ---|--- Affected Website:| webmail.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ids.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-635589 Description| Value ---|--- Affected Website:| ids.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

login.justhost.com XSS vulnerability

Open Bug Bounty ID: OBB-632690 Description| Value ---|--- Affected Website:| login.justhost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webmail.hiltonjohnsonproductions.com XSS vulnerability

Open Bug Bounty ID: OBB-630735 Description| Value ---|--- Affected Website:| webmail.hiltonjohnsonproductions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery

totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery Date: 14.05.2018 Introduction: ------------- The totemomail Encryption Gateway protects email communication with any external partner by encryption. It doesn't matter whether you exchange emails with technically savvy...

totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery

Date: 14.05.2018 Introduction: ------------- The totemomail Encryption Gateway protects email communication with any external partner by encryption. It doesn't matter whether you exchange emails with technically savvy communication partners or with those who have neither an appropriate...

Roundcube Webmail archive.php IMAP Command Injection (CVE-2018-9846)

An IMAP command injection vulnerability exists in Roundcube Webmail. The vulnerability is due to improper handling of the "uid" parameter within certain HTTP requests. A remote attacker can exploit this vulnerability by enticing an authenticated user to visit a page which sends a request to the...

Directory traversal

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a 1 .. dot dot in the file parameter to a webmail/client/skins/default/css/css.php page or .../. dot dot dot slash dot in the 2 script or 3 style parameter to...

CVE-2015-1503

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a 1 .. dot dot in the file parameter to a webmail/client/skins/default/css/css.php page or .../. dot dot dot slash dot in the 2 script or 3 style parameter to...