Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

basic webmail vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2012-5570
The Basic webmail module 6.x-1.x prior to 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.
Basic Webmail Project Basic Webmail 6.x-1.0Basic Webmail Project Basic Webmail 6.x-1.1Basic Webmail Project Basic Webmail 6.x-1.x
4.3
CVSSv2
CVE-2010-5337
IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0.
Icewarp Webclient
4.3
CVSSv2
CVE-2010-5338
IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.
Icewarp Webclient
4.3
CVSSv2
CVE-2010-5339
IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0.
Icewarp Webclient
4.3
CVSSv2
CVE-2014-4945
Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) prior to 6.1.8, as used in Horde Groupware Webmail Edition prior to 5.1.5, allow remote malicious users to inject arbitrary web script or HTML via an unspecified flag in the basic (1) mailbox...
Horde GroupwareHorde Groupware 5.1.3Horde Groupware 5.1.2Horde Groupware 5.1.1Horde Groupware 5.1.0Horde Internet Mail Program 6.1.3Horde Internet Mail Program 6.1.2Horde Internet Mail Program 6.1.1Horde Internet Mail Program 6.1.0Horde Internet Mail Program 6.0.0Horde Groupware 5.0.2Horde Groupware 5.0.1Horde Groupware 5.0.0Horde Internet Mail Program 6.0.5Horde Internet Mail Program 6.0.4Horde Internet Mail Program 6.0.3Horde Internet Mail Program 6.0.2Horde Internet Mail Program 6.0.1Horde Groupware 5.0.4Horde Internet Mail Program 6.1.6Horde Internet Mail Program 6.1.4Horde Groupware 5.0.5
4.3
CVSSv2
CVE-2012-5569
Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x prior to 6.x-1.2 for Drupal allow remote malicious users to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message.
Jason Flatt Basic Webmail 6.x-1.xBasic Webmail Project Basic Webmail 6.x-1.1Jason Flatt Basic Webmail 6.x-1.0
5
CVSSv2
CVE-2001-1537
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and previous versions stores cleartext usernames and passwords in cookies, which could allow malicious users to obtain authentication information and gain privileges.
Symfony Twig
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook