CVE-2017-11617

概要

参考情報

• help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6 · Vendor Advisory
• bishopfox.com/blog/2017/06/how-i-built-an-xss-worm-on-atmail · Exploit

atmail のその他の脆弱性

• CVE-2024-24133緊急 9.8Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.
• CVE-2022-31200中 6.1Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field…
• CVE-2022-30776中 6.1atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.
• CVE-2021-43574中 6.1WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI. NOTE: This vulne…
• CVE-2012-2593中 6.1Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbi…