CVE-2006-4952

概要

参考情報

• secunia.com/advisories/22029 · Patch
• vuln.sg/neonmail506-en.html · Exploit
• securityfocus.com/bid/20109 · Exploit
• securityfocus.com/bid/84202
• exchange.xforce.ibmcloud.com/vulnerabilities/29087

neon webmail のその他の脆弱性

• CVE-2006-4956中 6.8Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject ar…
• CVE-2006-4955中 5.0Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary…
• CVE-2006-4954高 7.5The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify i…
• CVE-2006-4953高 7.5Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-4951高 7.5Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file …