Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
info
discussion
exploit
solution
references
chuggnutt.com HTML to Plain Text Conversion Remote Code Execution Vulnerability
References:
AtMail Open Homepage
(AtMail Open)
Break-in possiblity via html2text.php
(RealMurphy)
Changeset 2148
(Roundcube)
PHP Class: HTML to Plain Text Conversion
(chuggnutt.com)
POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection)
(Jacobo Avariento Gimeno
)
Security Announcements - Remote code execution in Mahara 1.1.2
(Mahara)
Privacy Statement
Copyright 2008, SecurityFocus
