Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ron Ott

#24215of 60,596
12.1Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2019-6602
2019-10-11
7.8
CVE-2010-5334
Icewarp
Icewarp Mail Server
The issue allows for directory traversal, potentially resulting in the loss of confidential data from IceWarp Mailserver and the operating system. Input passed via the ` c` parameter to "basic/index.html" is not properly sanitized, enabling exploitation to browse the partition where IceWarp is installed and read arbitrary files.
PT-2019-6604
2019-10-11
4.3
CVE-2010-5336
Icewarp
Icewarp Webclient
The issue is related to a persistent XSS vulnerability via an HTTP POST request to the "admin/login.html" endpoint with the `username` parameter.