exploits , vulnerabilities , articles , IceWarp Universal WebMail PHPSESSID Parameter Cross-Site Scripting Vulnerability

Title	IceWarp Universal WebMail PHPSESSID Parameter Cross-Site Scripting Vulnerability
Published	2006-05-16-12:00AM
Updated	2006-05-17-07:24PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	LiNuX_rOOt <LiNuX_rOOt1@hotmail.com> is credited with the discovery of this vulnerability.
Vulnerable	IceWarp WebMail 5.5.1 IceWarp Web Mail 5.5.1 IceWarp Web Mail 5.4 IceWarp Web Mail 5.3.2 IceWarp Web Mail 5.3.1 IceWarp Web Mail 5.3 IceWarp Web Mail 5.2.8 IceWarp Web Mail 5.2.7 IceWarp Web Mail 4.1.5 IceWarp Web Mail 4.1.4 IceWarp Web Mail 3.5 .1 IceWarp Web Mail 3.5 .0 IceWarp Web Mail 3.4.2 IceWarp Web Mail 3.4.1 IceWarp Web Mail 3.3.2 IceWarp Web Mail 3.3.1 IceWarp Web Mail 3.1.4 IceWarp Web Mail 1.40.10 IceWarp Web Mail 1.40 .00
Not Vulnerable
Code	This issue can be exploited through a web client. An example URI has been provided: /data/vulnerabilities/exploits/IceWarp_poc.txt
TXT

Vulnerabilities - newest 10 RSS | More

2009-11-26 ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
2009-11-26 America Online ICQ ActiveX Control Remote Code Execution Vulnerability
2009-11-26 Novell eDirectory iMonitor HTTPSTK Buffer Overflow Vulnerability
2009-11-25 Mozilla Firefox and SeaMonkey Download Filename Spoofing Vulnerability
2009-11-25 XM Easy Personal FTP Server File/Folder Remote Denial of Service Vulnerability
2009-11-25 Subscribe to Comments Prior to 2.1 Multiple Unspecified Cross Site Scripting Vulnerabilities
2009-11-25 Mozilla Firefox CVE-2009-3383 Multiple Remote Memory Corruption Vulnerabilities
2009-11-24 Subscribe to Comments WordPress Plugin Multiple Unspecified Input Validation Vulnerabilities
2009-11-24 RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
2009-11-24 Cacti Multiple HTML Injection Vulnerabilities

SECURITY RSS FEEDS

Advertising

Copyright 2007, SecurityDot
Sat, 28 Nov 2009 22:34:20 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
www.lllm.c CMS is Fre ...N*/and free pics 200 /compo www.hq35.c animal-sex angel bot mambo Remo gambarporn 3.9 Sun Cobalt CMS is Fre tag tag.co Searching advanced g sexyurdust Microsoft remote adm pakistanis videos ero 9.2.2-p3 www.51xxi. youbian.co suse 8.2 e Seleb.tv came desimammy. play girls www.msynu. Photo sexy bbc arabk. CMS is Fre minibill www.taobao www. w1002 www.china- mambo Remo kmnice.cn www.163mam www.gmhx.n cookei sni www.fishjo heaven kno www.aiqing components www.trish www.mbzwz. pornici vi Aishwarya