EDB-24791
PoCOpen-Xchange Server 6 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbTyp webappsAutor Martin Braunveröffentlicht 2013-03-15Katalog exploit_db
01
ausgenutzte CVEs (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-1651US | medium5.8 | Exploit | ||
OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers, which allows man-in-the-midd… | ||||
| CVE-2013-1650US | low2.1 | Exploit | ||
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions (group "other" readable) under opt/open-xchange/etc/, which allows local… | ||||
| CVE-2013-1649US | medium4.3 | Exploit | ||
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for context-de… | ||||
| CVE-2013-1648US | low3.5 | Exploit | ||
The Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not properly validate the publication-source URL, which allo… | ||||
| CVE-2013-1647US | medium5.0 | Exploit | ||
Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary HTTP hea… | ||||
| CVE-2013-1646US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitr… | ||||
| CVE-2013-1645US | medium4.0 | Exploit | ||
Directory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allows remote authenticated users to read arbitrary files… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan