ID de Prueba:	1.3.6.1.4.1.25623.1.0.14379
Categoría:	Web application abuses
Título:	Merak Webmail / IceWarp Web Mail < 7.5.2 Multiple Vulnerabilities
Resumen:	Merak Webmail / IceWarp Web Mail is prone to multiple cross-site; scripting (XSS), HTML and SQL injection (SQLi), and PHP source code disclosure vulnerabilities.
Descripción:	Summary: Merak Webmail / IceWarp Web Mail is prone to multiple cross-site scripting (XSS), HTML and SQL injection (SQLi), and PHP source code disclosure vulnerabilities. Solution: Update to Merak Webmail / IceWarp Web Mail 7.5.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1719 BugTraq ID: 10966 http://www.securityfocus.com/bid/10966 Bugtraq: 20040817 Vulnerabilities in Merak Webmail Server (Google Search) http://marc.info/?l=bugtraq&m=109279057326044&w=2 http://packetstormsecurity.nl/0408-exploits/merak527.txt http://www.osvdb.org/9037 http://www.osvdb.org/9038 http://www.osvdb.org/9039 http://www.osvdb.org/9040 http://www.osvdb.org/9041 http://www.osvdb.org/9042 http://securitytracker.com/id?1010969 http://secunia.com/advisories/12269 XForce ISS Database: merak-xss(17024) https://exchange.xforce.ibmcloud.com/vulnerabilities/17024 Common Vulnerability Exposure (CVE) ID: CVE-2004-1720 http://www.osvdb.org/9043 XForce ISS Database: merak-address-calendar-path-disclosure(17027) https://exchange.xforce.ibmcloud.com/vulnerabilities/17027 Common Vulnerability Exposure (CVE) ID: CVE-2004-1721 http://www.osvdb.org/9045 XForce ISS Database: merak-view-php-files(17029) https://exchange.xforce.ibmcloud.com/vulnerabilities/17029 Common Vulnerability Exposure (CVE) ID: CVE-2004-1722 http://www.osvdb.org/9044 XForce ISS Database: merak-calendarhtml-sql-injection(17022) https://exchange.xforce.ibmcloud.com/vulnerabilities/17022
Copyright	Copyright (C) 2004 George A. Theall

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.