Summary
Detail | |||
---|---|---|---|
Vendor | Mailenable | First view | 2010-09-15 |
Product | Mailenable | Last view | 2023-01-13 |
Version | 4.13 | Type | Application |
Update | - | ||
Edition | std | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:mailenable:mailenable |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
8.8 | 2023-01-13 | CVE-2022-42136 | Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands. |
6.1 | 2019-07-08 | CVE-2019-12927 | MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability. |
8.8 | 2019-07-08 | CVE-2019-12926 | MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access. |
8.1 | 2019-07-08 | CVE-2019-12925 | MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials including those of SYSADMIN accounts, reading other users' emails, or adding emails or files to other users' accounts. |
9.8 | 2019-07-08 | CVE-2019-12924 | MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML processor to read any file on the host system. Because all credentials were stored in a cleartext file, it was possible to steal all users' credentials (including the highest privileged users). |
6.5 | 2019-07-08 | CVE-2019-12923 | In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker. |
10 | 2019-01-16 | CVE-2015-9280 | MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. |
6.1 | 2019-01-16 | CVE-2015-9279 | MailEnable before 8.60 allows Stored XSS via malformed use of " |
9.8 | 2019-01-16 | CVE-2015-9278 | MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request. |
9.1 | 2019-01-16 | CVE-2015-9277 | MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled. |
4.3 | 2012-01-24 | CVE-2012-0389 | Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter. |
5 | 2010-09-15 | CVE-2010-2580 | The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error." |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
25% (3) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
25% (3) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
16% (2) | CWE-611 | Information Leak Through XML External Entity File Disclosure |
8% (1) | CWE-352 | Cross-Site Request Forgery (CSRF) |
8% (1) | CWE-311 | Missing Encryption of Sensitive Data |
8% (1) | CWE-255 | Credentials Management |
8% (1) | CWE-20 | Improper Input Validation |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
78242 | MailEnable ForgottonPassword.aspx Username Parameter XSS |
68046 | MailEnable SMTP Service (MESMTPC.exe) RCPT TO Command Domain Name Remote DoS |
68045 | MailEnable SMTP Service (MESMTPC.exe) MAIL FROM Command Email Address Remote DoS |
ExploitDB Exploits
id | Description |
---|---|
18447 | MailEnable Webmail Cross-Site Scripting Vulnerability |
OpenVAS Exploits
id | Description |
---|---|
2012-01-13 | Name : MailEnable 'ForgottonPassword.aspx' Cross Site Scripting Vulnerability File : nvt/gb_mailenable_51401.nasl |
2010-09-14 | Name : MailEnable 'MESMTRPC.exe' SMTP Service Multiple Remote Denial of Service Vul... File : nvt/gb_mailenable_43182.nasl |
Snort® IPS/IDS
Date | Description |
---|---|
2014-01-10 | RCPT TO overflow RuleID : 654-community - Type : SERVER-MAIL - Revision : 28 |
2014-01-10 | RCPT TO overflow RuleID : 654 - Type : SERVER-MAIL - Revision : 28 |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2012-06-19 | Name: The remote web server hosts an application that is affected by a cross-site s... File: mailenable_forgottenpassword_xss.nasl - Type: ACT_ATTACK |
2010-09-20 | Name: The remote mail server is prone to denial of service attacks. File: mailenable_me_10044.nasl - Type: ACT_GATHER_INFO |