Design/Logic Flaw

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

CVE-2017-14597

Affected software: AfterLogic WebMail 7.7 and Aurora 7.7.5; component: AdminPanel via adminpanel/modules/pro/inc/ajax.php. Issue: cross-site scripting (XSS) vulnerability exploitable via the txtDomainName field during domain addition. Root cause: improper handling of input in the AdminPanel domai...

AfterLogic WebMail and Aurora Cross-Site Scripting Vulnerabilities

AfterLogic WebMail and Aurora are both products of AfterLogic, Inc. AfterLogic Aurora is a set of enterprise-class e-mail servers.WebMail is an e-mail client.AdminPanel is one of the back-end management systems. A cross-site scripting vulnerability exists in AfterLogic WebMail version 7.7 and...

search.webmail.co.za XSS vulnerability

Vulnerable URL: https://search.webmail.co.za/?cx=partner-pub-1961813195636065%3Aal3xxz-dom1=FORID%3A10=ISO-8859-1=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E&sa.x;=0&sa.y;=0===https%3A%2F%2Fwww.webmail.co.za%2Fgames%2F%2522%253E%253Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%253E Details:...

PT-2017-4168

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.1.10 Roundcube Webmail versions 1.2.x prior to 1.2.7 Roundcube Webmail versions 1.3.x prior to 1.3.3 Description The issue is related to file-based attachment plugins and allows unauthorized access to...

IceWarp Server webmail component cross-site scripting vulnerability

IceWarp Server is a mail server product from IceWarp USA. The product supports email archiving, SmartAttach attachments, automatic migration, etc. webmail component is one of the mailbox components. A cross-site scripting vulnerability exists in the 'language' parameter of the webmail component i...

webmail.tele2.se Open Redirect vulnerability

Vulnerable URL: https://webmail.tele2.se/SRedirect/www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

IceWarp Mail Server < 12.0.2.0 XSS Vulnerability

IceWarp Mail Server is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2017-7855

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter...

CVE-2017-7855

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter...

Design/Logic Flaw

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter...

CVE-2017-7855

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter...

CVE-2017-7855

IceWarp WebMail 11.3.1.5 is affected by a Cross-Site Scripting (XSS) vulnerability in the language parameter of the webmail component. The Nuclei template confirms the affected product/version and states that an attacker can execute arbitrary JavaScript in a victim’s browser, potentially stealing...

IceWarp Mail Server Detection (HTTP)

HTTP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Legal Robot: Information Discloser

Affected Url: https://webmail.legalrobot-uat.com/" When i Open This Link Then It Gives An Error In Which information is disclosing about your server type and its version and Os of your server and also port no is shown which is using on your server and open For Proof i am attaching Screenshot...

Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2017-18573)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in Roundcube Webmail version 1.1.5. A remote attacker can exploit this vulnerability to execute JavaScript...

atmail Cross-Site Scripting Vulnerability

atmail is an open source WebMail client from Australia's atmail company , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site scripting vulnerability exists in versions of atmail prior to 7.8.0.2. A...

CopyKittens Exposed by ClearSky and Trend Micro

CopyKittens is a cyberespionage group that ClearSky has been reporting on since 2015, tracking their attacks on government-related bodies around the world. Trend Micro has supported this research at several points, including for their latest report released today on the group’s vast espionage...