5036 matches found
EveryoneXSS.txt
Title: Everyone's loginName variable Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Published: 12 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Vendor: everyone / www.everyone.net Vulnerability: Cross Site Scripting Exploit included: Yes Details:...
MailEnable Webmail Malformed Quoted-printable Email DoS (CVE-2006-0504)
The remote host is running MailEnable, a commercial mail server for Windows. According to its banner, using the webmail service bundled with the version of MailEnable Enterprise Edition on the remote host to view specially-formatted quoted-printable messages reportedly may result in 100% CPU...
neomailXSS.txt
Title: Neomail Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 24 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Perl Client Vendor: neomail / www.neocodesolutions.com Vulnerability: Cross Site Scripting / Cookie-The...
[SA18646] @Mail Webmail Attachment Upload Directory Traversal
TITLE: @Mail Webmail Attachment Upload Directory Traversal SECUNIA ADVISORY ID: SA18646 VERIFY ADVISORY: http://secunia.com/advisories/18646/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: @Mail 4.x http://secunia.com/product/5459/ DESCRIPTION: Secunia Research h...
[Full-disclosure] Neomail Cross Site Scripting Vulnerability
Title: Neomail Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 24 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Perl Client Vendor: neomail / www.neocodesolutions.com Vulnerability: Cross Site Scriptin...
[Full-disclosure] Outblaze Cross Site Scripting Vulnerability
Title: outblaze Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 23 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail manager Vendor: outblaze / www.outblaze.com Vulnerability: Cross Site Scripting /...
CVE-2006-0504
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...
CVE-2006-0504
CVE-2006-0504 affects MailEnable Enterprise Edition before 1.2. The vulnerability arises when a remote attacker views specially formatted quoted-printable emails through the webmail interface, causing denial of service via 100% to high CPU utilization. Documents do not specify exploitation detail...
CVE-2006-0504
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...
CVE-2006-0504: Undefined Security Weakness
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...
Mozilla CSS crossite scripting
-moz-binding: CSS allows to bind XBL with element and XBL may contains scripts. It may lead to crossite sripting within e.g. webmail...
CVE-2006-0091
Cross-site scripting XSS vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline...
Cross site scripting
Cross-site scripting XSS vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline...
CVE-2006-0091
Cross-site scripting XSS vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline...
CVE-2006-0091: Undefined Security Weakness
Cross-site scripting XSS vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline...
[Full-disclosure] Open Xchange XSS
Open Xchange webmail =0.8.1-6 suffers from xss. http://mirror.open-xchange.org/ox/EN/community/ Vendor response: For the commercial OX you don't need this as there exists additional security options where you will not able to use this session. It's a general problem for all web based mailers and...
VisNetic / Merak Mail Server Multiple Remote Vulnerabilities
The remote host is running VisNetic / Merak Mail Server, a multi- featured mail server for Windows. The webmail and webadmin services included in the remote version of this software are prone to multiple flaws. An attacker could send specially crafted URLs to execute arbitrary scripts, perhaps...
IceWarp Universal WebMail - mailindex.html?lang_settings Remote File Inclusion
IceWarp Universal WebMail - mailindex.html?langsettings Remote File Inclusion source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal...
IceWarp Universal WebMail - adminincinclude.php Multiple Remote File Inclusions
IceWarp Universal WebMail - adminincinclude.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal...
IceWarp Universal WebMail - accountsincinclude.php Multiple Remote File Inclusions
IceWarp Universal WebMail - accountsincinclude.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal...