CVE-2017-14597

概要

参考情報

• auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed · Exploit

aurora のその他の脆弱性

• CVE-2021-26294高 7.5An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such…
• CVE-2021-26293緊急 9.8An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversa…
• CVE-2019-19129中 6.1Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.
• CVE-2019-16238中 6.1Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the admin…