4845 matches found
Captaris Infinite WebMail 3.61.5 - HTML Injection
Captaris Infinite WebMail 3.61.5 - HTML Injection source: https://www.securityfocus.com/bid/6411/info An HTML injection vulnerability has been discovered in Captaris Infinite WebMail. Due to insufficient sanitization of HTML content, it is possible for an attacker to embed malicious script code...
Captaris Infinite WebMail 3.61.5 - HTML Injection
source: https://www.securityfocus.com/bid/6411/info An HTML injection vulnerability has been discovered in Captaris Infinite WebMail. Due to insufficient sanitization of HTML content, it is possible for an attacker to embed malicious script code into HTML email messages. This may allow an attacke...
Open WebMail 1.71 "background" magic info
Hello Folks, Open Webmail is a perl webmail program that runs on UNIX operational systems. For more about Open WebMail, its official website is http://openwebmail.org/. Ok, lets talk about the problem. Ive tested Open WebMail 1.71 an when you enter an invalid username user that doesnt exist on th...
XSS-Cookie-Advisory.txt
------------------------------------------------------- XSS/Cookie problems at major webmail sites Advisory ------------------------------------------------------- XSS/Cookie problems at major webmail sites 13/11/02 - by "N|ghtHawk" Thijs Bosschert nighthawkathackers4hackers.org...
IceWarp 3.4.5 XSS *AGAIN*
DarC KonQuesT IceWarp 3.4.5 XSS Release Product: IceWarp Webmail 3.4.5 Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild Operating Systems: Tested against Win2k Discovered: October 29, 2002 Vendor Notified: October 29, 2002 Publi...
KMMail 1.0 - E-Mail HTML Injection
source: https://www.securityfocus.com/bid/6013/info kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script code. This may allow an attacker to...
Crossitescripting in Argosoft Mail Server Pro
Crossite scripting in WebMail, cleartext passwords in cookie :...
CVE-2002-1004
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...
IIL Advisory: Format String bug in Null Webmail (0.6.3)
Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: Format String bug in Null Webmail 0.6.3 Advisory number: 7 Application: Null Webmail 0.6.3 Author: Dan Cahill E-mail: [email protected] Homepage:...
SquirrelMail 1.2.6/1.2.7 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/5763/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. Multiple cross site scripting vulnerabilities have been discovered in various PHP scripts included with...
SquirrelMail 1.2.61.2.7 - Multiple Cross-Site Scripting Vulnerabilities
SquirrelMail 1.2.61.2.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5763/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. Multiple cross site scripting...
CVE-2001-1408
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. dot dot in the mailbox parameter...
CVE-2001-1408
CVE-2001-1408 affects WebMail 2.0.1 on Cobalt Qube 3. It is a directory traversal vulnerability in readmsg.php where a crafted mailbox parameter containing .. can cause remote reading of arbitrary files. The OpenVAS NASL detection notes readmsg.php presence and flags the traversal issue; Nessus c...
CVE-2001-1408: Undefined Security Weakness
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. dot dot in the mailbox parameter...
IceWarp Webmail XSS
DarC KonQuesT XSS Release- Product: IceWarp Webmail 3.3.3 tested, others possibly vulnerable Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild-Moderate Operating Systems: Tested against Win2k but all others if objects are handled...
Basilix Webmail basilix.php3 request_id[DUMMY] Variable Traversal Arbitrary File Access
The script 'basilix.php3' is installed on the remote web server. Some versions of this webmail software allow the users to read any file on the system with the permission of the webmail software, and execute any PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: From: "karol "...
Cobalt Qube WebMail readmsg.php mailbox Parameter Traversal Arbitrary File Access
The file '/base/webmail/readmsg.php' was detected on the remote web server. Some versions of this CGI allow remote users to read local files with the permission of the web server. Nessus just checked the presence of this file but did not try to exploit the flaw. %NASLMINLEVEL 70300 C Tenable...
CVE-2002-0532
EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...
CVE-2002-0531
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...