Vendor/product archive

afterlogic / webmail_pro CVEs

Beta · best-effort

4 CVEs tagged to afterlogic / webmail_pro — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to afterlogic vendor archive

CVE-2021-26294

Published Mar 7, 2021

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file c…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-26293

Published Mar 4, 2021

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an execu…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-19129

Published Nov 26, 2019

Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-4743

Published Mar 26, 2010

Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or H…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1