Open Webmail

Open Webmail

13 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2004-0639

Exploit
  • EPSS 3.63%
  • Published 06.08.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php,...

5

CVE-2002-2410

Exploit
  • EPSS 0.42%
  • Published 31.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain c...

7.2

CVE-2002-1385

  • EPSS 0.05%
  • Published 26.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configu...