Webmail@0.6 Security Vulnerabilities and Issues — Webmail@0.6 CVE List

Lucene search

RoundcubeWebmail0.6

3 matches found

CVE•added 2013/11/05 6:55 p.m.•83 views

CVE-2013-6172

steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code.

7.5CVSS7.8AI score0.01114EPSS

CVE•added 2013/02/24 9:55 p.m.•44 views

CVE-2012-6121

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link.

4.3CVSS5.4AI score0.00407EPSS

CVE•added 2013/08/29 12:7 p.m.•37 views

CVE-2013-5645

Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to...

4.3CVSS5.2AI score0.00305EPSS