Afterlogic Webmail Pro
4 CVEs affecting Afterlogic Webmail Pro. Latest disclosed: 2021-03-07. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26293 | Critical | 9.8 | 2021-03-04 | An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new fil… |
CVE-2021-26294 | High | 7.5 | 2021-03-07 | An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings… |
CVE-2019-19129 | Medium | 6.1 | 2019-11-26 | Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name. |
CVE-2009-4743 | | 2010-03-26 | Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbit… |