Vulnerabilities

8 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: atmail ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2024-24133	Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page. Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page. NVD description · AI analysis pending	9.8	<1%		atmail atmail	—	Feb 7, 2024
CVE-2022-31200	Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field. Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field. NVD description · AI analysis pending	6.1	<1%		atmail atmail	—	Jul 27, 2023
CVE-2022-30776	atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. NVD description · AI analysis pending	6.1	4%		atmail atmail	—	May 16, 2022
CVE-2021-43574	WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI. WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default URI. NOTE: This vulnerability only affects products that are no longer supported by the maintainer NVD description · AI analysis pending	6.1	2%		atmail atmail	—	Nov 15, 2021
CVE-2017-11617	Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes. NVD description · AI analysis pending	6.1	1%	PoC	atmail atmail	—	Jul 25, 2017
CVE-2017-9519 +2 in the same advisory: …9518 …9517	atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. NVD description · AI analysis pending	8.8	<1%		atmail atmail	—	Jun 8, 2017