Icewarp

Email Server

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2009-1467

Exploit
  • EPSS 7.2%
  • Published 05.05.2009 20:30:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filt...

6.5

CVE-2009-1468

Exploit
  • EPSS 0.29%
  • Published 05.05.2009 20:30:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and ...

4.3

CVE-2009-1469

Exploit
  • EPSS 5.49%
  • Published 05.05.2009 20:30:00
  • Last modified 09.04.2025 00:30:58

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences prece...