Published: 12/02/2014 Updated: 09/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) filter parameter to index.php/mail/mail/listfoldermessages/searching/true/selectFolder/INBOX/resultContext/searchResultsTab5 or (2) mailId[] parameter to index.php/mail/mail/movetofolder/fromFolder/INBOX/toFolder/INBOX.Trash. NOTE: the view attachment message process vector is already covered by CVE-2013-2585.

Vulnerable Product	Search on Vulmon	Subscribe to Product
atmail atmail 7.0.2

Atmail WebMail version 702 suffers from multiple cross site scripting vulnerabilities ...

source: wwwsecurityfocuscom/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow the attack ...

source: wwwsecurityfocuscom/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow the at ...

source: wwwsecurityfocuscom/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow the atta ...

CWE-79 http://www.isecauditors.com/advisories-2013#2013-014 http://www.securityfocus.com/archive/1/530934/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/125097/Atmail-WebMail-7.0.2-Cross-Site-Scripting.html https://www.exploit-db.com/exploits/39079/

CVE-2013-6229

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect