İçeriğe atla
Noroxi

Atmail kayıtları

atmail üreticisine ait 32 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

32 kayıt
  • CVE-2013-5034
    41Planlayın

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    KritikCVSS 10,0İstismar yokEPSS %2

    atmail · atmail12 Oca 2014

  • CVE-2013-5033
    41Planlayın

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    KritikCVSS 10,0İstismar yokEPSS %2

    atmail · atmail12 Oca 2014

  • CVE-2013-5032
    41Planlayın

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    KritikCVSS 10,0İstismar yokEPSS %2

    atmail · atmail12 Oca 2014

  • CVE-2013-5031
    41Planlayın

    Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha

    KritikCVSS 10,0İstismar yokEPSS %2

    atmail · atmail12 Oca 2014

  • CVE-2024-24133
    39İzleyin

    Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.

    KritikCVSS 9,8İstismar yokEPSS %1

    atmail · atmail7 Şub 2024

  • CVE-2017-9517
    35İzleyin

    atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.

    YüksekCVSS 8,8İstismar yokEPSS %0

    atmail · atmail8 Haz 2017

  • CVE-2017-9519
    35İzleyin

    atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.

    YüksekCVSS 8,8İstismar yokEPSS %0

    atmail · atmail8 Haz 2017

  • CVE-2017-9518
    35İzleyin

    atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.

    YüksekCVSS 8,8İstismar yokEPSS %0

    atmail · atmail8 Haz 2017

  • CVE-2012-1916
    31İzleyin

    @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an ex

    YüksekCVSS 7,5İstismar yokEPSS %3

    atmail · atmail open27 Mar 2012

  • CVE-2006-0611
    31İzleyin

    Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to ar

    YüksekCVSS 7,5İstismar yokEPSS %2

    atmail · atmail8 Şub 2006

  • CVE-2006-6701
    30İzleyin

    Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in 5.x before 5.03, allows remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %1

    atmail · atmail webmail22 Ara 2006

  • CVE-2006-6702
    27İzleyin

    Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML vi

    OrtaCVSS 6,8İstismar yokEPSS %1

    atmail · atmail webmail22 Ara 2006

  • CVE-2007-2153
    27İzleyin

    Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the u

    OrtaCVSS 6,8İstismar yokEPSS %1

    atmail · atmail webmail19 Nis 2007

  • CVE-2006-6704
    27İzleyin

    Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 6,8İstismar yokEPSS %1

    atmail · atmail webadmin22 Ara 2006

  • CVE-2013-6028
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authenti

    OrtaCVSS 6,8İstismar yokEPSS %1

    atmail · atmail12 Oca 2014

  • CVE-2012-2593
    26İzleyin

    Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbi

    OrtaCVSS 6,1Kavram kanıtıEPSS %6

    atmail · atmail6 Şub 2020

  • CVE-2012-1919
    26İzleyin

    CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct direct

    OrtaCVSS 6,4İstismar yokEPSS %2

    atmail · atmail open27 Mar 2012

  • CVE-2022-30776
    25İzleyin

    atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    atmail · atmail16 May 2022

  • CVE-2021-43574
    25İzleyin

    WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    atmail · atmail15 Kas 2021

  • CVE-2017-11617
    24İzleyin

    Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML w

    OrtaCVSS 6,1İstismar yokEPSS %1

    atmail · atmail25 Tem 2017

  • CVE-2022-31200
    24İzleyin

    Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field

    OrtaCVSS 6,1İstismar yokEPSS %0

    atmail · atmail27 Tem 2023

  • CVE-2012-1918
    21İzleyin

    Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Sourc

    OrtaCVSS 5,0İstismar yokEPSS %4

    atmail · atmail open27 Mar 2012

  • CVE-2012-1920
    21İzleyin

    @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request

    OrtaCVSS 5,0İstismar yokEPSS %3

    atmail · atmail open27 Mar 2012

  • CVE-2012-1917
    21İzleyin

    compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique p

    OrtaCVSS 5,0İstismar yokEPSS %2

    atmail · atmail open27 Mar 2012

  • CVE-2013-6017
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3Kavram kanıtıEPSS %4

    atmail · atmail12 Oca 2014