vicente aguilera diaz vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) filter parameter to index.php/mail/mail/listfoldermessages/searching/true/selectFolder/INBOX/resultContext/searchResu...

Atmail Atmail 7.0.2

3 EDB exploits

SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote malicious users to execute arbitrary SQL commands via the objectId parameter.

Projeqtor Projeqtor 3.4.0

1 EDB exploit

Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail prior to 6.2.0 allows remote malicious users to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action.

Atmail Webmail 6.1.6 Atmail Webmail 6.1.5 Atmail Webmail 6.1.4 Atmail Webmail 6.1.3 Atmail Webmail 6.1.8 Atmail Webmail 6.1.7 Atmail Webmail Atmail Webmail 6.1.2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x prior to 6.6.3 and 7.0.x prior to 7.0.3 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId/<MessageID&g...

Atmail Atmail 6.6.0 Atmail Atmail 7.0.0 Atmail Atmail 7.0.1 Atmail Atmail 6.6.1 Atmail Atmail 6.6.2

Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the error parameter.

Inside Systems Inside Systems Mail 2.0

1 EDB exploit

CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and previous versions prior to 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name. NOTE: the attack crosses privilege boundaries if the IMAP server confi...

Hastymail Hastymail Hastymail Hastymail 1.0.1 Hastymail Hastymail 1.0.2 Hastymail Hastymail 1.1 Hastymail Hastymail 1.2

1 EDB exploit

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote malicious users to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."

Squirrelmail Squirrelmail 1.4.3 Squirrelmail Squirrelmail 1.4.3 R3 Squirrelmail Squirrelmail 1.4 Rc1 Squirrelmail Squirrelmail 1.4.1 Squirrelmail Squirrelmail 1.4.2 Squirrelmail Squirrelmail 1.4.5 Squirrelmail Squirrelmail 1.4.6 Rc1 Squirrelmail Squirrelmail 1.4.3 Rc1 Squirrelmail Squirrelmail 1.4.3a Squirrelmail Squirrelmail 1.4 Squirrelmail Squirrelmail 1.4.4 Squirrelmail Squirrelmail 1.4.4 Rc1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook