Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

afterlogic / aurora CVEs

Beta · best-effort

5 CVEs tagged to afterlogic / aurora — 1 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to afterlogic vendor archive

CVE-2021-26294

Published Mar 7, 2021

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file c…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-26293

Published Mar 4, 2021

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an execu…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-19129

Published Nov 26, 2019

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-16238

Published Sep 12, 2019

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-14597

Published Sep 19, 2017

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1