Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

icewarp webmail server 5.8.4 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-1467
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote malicious users to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML...
Icewarp Webmail Server 2.10.115Icewarp Webmail Server 2.10.150Icewarp Webmail Server 2.10.240Icewarp Webmail Server 2.10.250Icewarp Webmail Server 2.10.340Icewarp Webmail Server 2.10.350Icewarp Webmail Server 3.10.110Icewarp Webmail Server 4.00.30Icewarp Webmail Server 4.4.2Icewarp Webmail Server 5.1.2Icewarp Webmail Server 5.5.3Icewarp Webmail Server 5.5.4Icewarp Webmail Server 5.8.4Icewarp Webmail Server 5.8.5Icewarp Webmail Server 6.1.0Icewarp Webmail Server 6.2.1Icewarp Webmail Server 7.4.5Icewarp Webmail Server 7.5.2Icewarp Webmail Server 8.2.2Icewarp Webmail Server 8.3.5Icewarp Webmail Server 2.10.110Icewarp Webmail Server 9.2.0
6.5
CVSSv2
CVE-2009-1468
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server prior to 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an ...
Icewarp Webmail Server 2.10.210Icewarp Webmail Server 2.10.220Icewarp Webmail Server 2.10.320Icewarp Webmail Server 2.10.330Icewarp Webmail Server 3.00.140Icewarp Webmail Server 2.10.170Icewarp Webmail Server 3.10.011Icewarp Webmail Server 4.2.3Icewarp Webmail Server 4.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.4.3Icewarp Webmail Server 5.8.2Icewarp Webmail Server 5.8.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 6.0.7Icewarp Webmail Server 7.2.0Icewarp Webmail Server 7.4.0Icewarp Webmail Server 8.0.2Icewarp Webmail Server 8.2.0Icewarp Webmail Server 9.1.0Icewarp Webmail ServerIcewarp Email Server 2.10.110
4.3
CVSSv2
CVE-2009-1469
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server prior to 9.4.2 makes it easier for remote malicious users to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header...
Icewarp Webmail Server 2.10.170Icewarp Webmail Server 2.10.200Icewarp Webmail Server 2.10.290Icewarp Webmail Server 2.10.320Icewarp Webmail Server 3.00.120Icewarp Webmail Server 3.00.130Icewarp Webmail Server 4.2.1Icewarp Webmail Server 4.2.2Icewarp Webmail Server 5.4.1Icewarp Webmail Server 5.4.2Icewarp Webmail Server 5.5.7Icewarp Webmail Server 5.7.3Icewarp Webmail Server 6.0.2Icewarp Webmail Server 6.0.3Icewarp Webmail Server 6.0.5Icewarp Webmail Server 7.1.6Icewarp Webmail Server 7.2.0Icewarp Webmail Server 8.0.1Icewarp Webmail Server 8.0.3Icewarp Webmail Server 8.9.1Icewarp Webmail Server 9.0.0Icewarp Webmail Server 9.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook