altn mdaemon webmail vulnerabilities and exploits

(subscribe to this query)

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an malicious user to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

Altn Mdaemon Webmail

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an malicious user to executes code and perform a XSS attack while opening a contact list.

Altn Mdaemon Webmail

MDaemon Webmail (formerly WorldClient) has CSRF.

Altn Mdaemon Webmail 14.0

MDaemon Webmail 14.x up to and including 18.x prior to 18.5.2 has XSS (issue 1 of 2).

MDaemon Webmail 14.x up to and including 18.x prior to 18.5.2 has XSS (issue 2 of 2).

An issue exists in MDaemon prior to 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user.

1 Github repository

An issue exists in MDaemon prior to 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an malicious user to perform any action with the privileges of the attacked user.

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook