4346 matches found
Debian Security Advisory DSA 1290-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 1290-1. OpenVAS Vulnerability Test $Id: deb12901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1290-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 220-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 220-1. OpenVAS Vulnerability Test $Id: deb2201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 220-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
MailBee WebMail Pro 4.1 (ASP.NET) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== MailBee WebMail Pro 4.1 ASP.NET Remote File Disclosure Vulnerability ====================================================================== homepage: www.afterlogic.com...
MailBee WebMail Pro 4.1 - Remote File Disclosure
MailBee WebMail Pro 4.1 - Remote File Disclosure homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=- milw0rm.com 2008-01-16...
MailBee WebMail Pro 4.1 - Remote File Disclosure
homepage: www.afterlogic.com example: http://www.xxx.com/webmail-pro-net/downloadviewattachment.aspx?tempfilename=../../../../../../../../../../../../../../../../../../boot.ini -=M.o.B=- milw0rm.com 2008-01-16...
Horde IMP及Groupware Webmail Edition多个输入验证漏洞
BUGTRAQ ID: 27223 CVECAN ID: CVE-2007-6018 IMP是一款基于Web的强大的邮件程序，它由Horde项目组开发。可使用在Linux/Unix或者Microsoft Windows操作系统下。 IMP在处理HTML的数据时存在漏洞，远程攻击者可能利用此漏洞非授权操作邮件。 IMP Webmail客户端和Groupware Webmail Edition的HTML过滤器没有过滤掉frame和frameset...
Design/Logic Flaw
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to 1 delete arbitrary e-mail messages via a modified numeric ID or 2 "purge" deleted emails via a crafted email message...
CVE-2007-6018
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to 1 delete arbitrary e-mail messages via a modified numeric ID or 2 "purge" deleted emails via a crafted email message...
CVE-2007-6018
CVE-2007-6018 affects IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3, where insufficient validation of HTTP requests allows a remote attacker to (1) delete arbitrary emails via a modified numeric ID and (2) purge deleted emails via a crafted...
CVE-2007-6018
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to 1 delete arbitrary e-mail messages via a modified numeric ID or 2 "purge" deleted emails via a crafted email message...
Directory traversal
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sessauth=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without...
CVE-2008-0210
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sessauth=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without...
CVE-2008-0210
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sessauth=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without...
CVE-2008-0210
Affected software: Uebimiau Webmail 2.7.10 and 2.7.2. The CVE-2008-0210 issue arises from improper protection of authentication state variables, allowing remote attackers to bypass authentication via a sess[auth]=1 parameter. This can enable authenticated- or unauthenticated-access scenarios, and...
IceWarp Mail Server admin/index.html message Parameter XSS
The remote host is running IceWarp Merak Mail Server, a webmail server for Windows and Linux. The remote version of IceWarp fails to sanitize user input to the 'message ' parameter of the 'admin/index.html' script before using it to generate dynamic content. An unauthenticated, remote attacker ma...
CVE-2008-0140
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the selectedtheme parameter, a different vector than CVE-2007-3172...
Directory traversal
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the selectedtheme parameter, a different vector than CVE-2007-3172...
CVE-2008-0140
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the selectedtheme parameter, a different vector than CVE-2007-3172...
CVE-2008-0140
CVE-2008-0140 affects Uebimiau Webmail 2.7.10 and 2.7.2, where a directory traversal vulnerability in error.php allows remote authenticated users to read arbitrary files via a .. in the selected_theme parameter. This is a separate vector from CVE-2007-3172. The connected sources confirm the affec...