Design/Logic Flaw

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

CVE-2010-3579

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail...

CVE-2010-3579

CVE-2010-3579 affects Sun Convergence 1 and Sun Java Communications Suite 7 components in Oracle Sun Product Suite 1.0/7.0, exploitable via Webmail over HTTP. The Oracle CPU October 2010 advisory indicates these vulnerabilities can be remotely exploitable without authentication, impacting confide...

CVE-2010-3564

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

CVE-2010-3564

CVE-2010-3564 is evidenced in connected documents as a Kerberos AP-REQ check vulnerability in OpenJDK/OpenJDK, which could cause a denial of service in the Java VM. Remediation in the sources shown includes OpenJDK/IcedTea updates (e.g., RHSA-2010:0768, ELSA-2010-0768) upgrading to patched OpenJD...

CVE-2010-3564

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

OpenJDK kerberos vulnerability (6958060)

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

OverLook Cross-site Scripting Vulnerability

ANATOLIA SECURITY ADVISORY --------------------------- ADVISORY INFO + Title: OverLook Cross-site Scripting + Advisory URL: http://anatoliasecurity.com/Blog/Detay.aspx?bId=2 + Advisory ID: 2010-002 + Version: v5.0 + Date: 06/10/2010 + Impact: Execute Malicious Javascript Codes + CWE-ID: 79 +...

IMP Webmail stored cross-site scripting vulnerability and fixes-vulnerability warning-the black bar safety net

Affected version: Horde IMP 4.3.7 vulnerability description: BUGTRAQ ID: 4 3 5 1 5 IMP is a Web-based powerful e-mail program, by the Horde project group developed, can be used in Linux/Unix or Windows operating system. IMP Webmail is not correctly filtered submitted to the fetchmailprefs. php...

Uebimiau Webmail 'stage' Parameter Local File Include Vulnerability

Uebimiau Webmail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Uebimiau Webmail 3.2.0-2.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================= Uebimiau Webmail 3.2.0-2.0 Local File Inclusion Vulnerability ============================================================= Exploit Title: Uebimiau Webmail Local File Inclusion Date...

NetWin Surgemail XSS vulnerability

Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer [email protected] Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input...

Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion

Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage parameter is not properly sanitized...

Uebimiau Webmail 3.2.0-2.0 Local File Inclusion

Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage parameter is not properly sanitized...

Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion

Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp...

Horde IMP Webmail fetchmailprefs.php存储式跨站脚本漏洞

BUGTRAQ ID: 43515 IMP是一款基于Web的强大的邮件程序，由Horde项目组开发，可使用在Linux/Unix或者Windows操作系统下。 IMP Webmail没有正确地过滤提交给fetchmailprefs.php脚本的fmid URL参数，远程攻击者可以通过提交恶意URL请求执行存储式跨站脚本攻击。当用户访问邮件获取偏好页面时就会执行所注入的代码。 Horde IMP 4.3.7 厂商补丁： Horde ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Atmail WebMail < 6.2.0 (6.20) 'MailType' Parameter XSS

According to its version, the Atmail WebMail install on the remote host is earlier than 6.2.0 6.20. Such versions are affected by a cross-site scripting vulnerability because they fail to sanitize the 'MailType' parameter before using it to generate dynamic HTML content. An unauthenticated, remot...

Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability

Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability

Horde IMP Webmail is prone to an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...