icewarp webclient vulnerabilities and exploits

(subscribe to this query)

NA

Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.

Icewarp Webclient 10.3.5

NA

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote malicious user to execute arbitrary code via a crafted payload to the mid parameter.

Icewarp Webclient 10.2.1

NA

IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) exists to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php.

Icewarp Webclient Dc2 13.0.2.9

4.3

CVSSv2

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote malicious users to inject arbitrary web script or HTML via the "p4" field.

Icewarp Webclient 10.3.5

7.8

CVSSv2

IceWarp Webclient prior to 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exp...

Icewarp Webclient

4.3

CVSSv2

IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0.

Icewarp Webclient

4.3

CVSSv2

IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0.

Icewarp Webclient

4.3

CVSSv2

IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.

Icewarp Webclient

4.3

CVSSv2

IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0.

Icewarp Webclient

4.3

CVSSv2

IceWarp Webclient prior to 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.

Icewarp Webclient

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook