CVE-2008-3726

CVE-2008-3726 describes a cross-site scripting (XSS) vulnerability in MicroWorld Technologies’ MailScan web-based administration. The vulnerability allows an attacker to inject arbitrary web script or HTML via the URI, potentially affecting the MailScan Web Admin interface. Connected documents co...

CVE-2008-3729

CVE-2008-3729 affects MicroWorld Technologies MailScan Web-Based Administration (MailScan 5.6.a espatch 1). The issue allows remote attackers to bypass authentication and obtain administrative access by sending a direct request with (1) an IsAdmin=true cookie value or (2) no cookie. This is a coo...

CVE-2008-3727

CVE-2008-3727 describes a directory traversal vulnerability in the Web Based Administration component of MicroWorld Technologies MailScan 5.6.a espatch 1. An unauthenticated or remote attacker could read arbitrary files by presenting a URI path containing .. (dot dot). The available connected sou...

CVE-2008-3728

CVE-2008-3728 affects MicroWorld Technologies MailScan 5.6.a espatch 1. Web-based administration stores sensitive information under the web root with insufficient access control, enabling remote attackers to discover installation path, IP addresses, and error messages by requesting files under LO...