CVE-2007-0652 Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users vi...
MediumCVSS 5.1
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable professional | = 1.0.004 | No fix listed |
| mailenable professional | = 1.0.005 | No fix listed |
| mailenable professional | = 1.0.006 | No fix listed |
| mailenable professional | = 1.0.007 | No fix listed |
| mailenable professional | = 1.0.008 | No fix listed |
| mailenable professional | = 1.0.009 | No fix listed |
| mailenable professional | = 1.0.010 | No fix listed |
| mailenable professional | = 1.0.011 | No fix listed |
| mailenable professional | = 1.0.012 | No fix listed |
| mailenable professional | = 1.0.013 | No fix listed |
| mailenable professional | = 1.0.014 | No fix listed |
| mailenable professional | = 1.0.015 | No fix listed |
| mailenable professional | = 1.0.016 | No fix listed |
| mailenable professional | = 1.0.017 | No fix listed |
| mailenable professional | = 1.1 | No fix listed |
| mailenable professional | = 1.2 | No fix listed |
| mailenable professional | = 1.2a | No fix listed |
| mailenable professional | = 1.5 | No fix listed |
| mailenable professional | = 1.6 | No fix listed |
| mailenable professional | = 1.7 | No fix listed |
| mailenable professional | = 1.12 | No fix listed |
| mailenable professional | = 1.13 | No fix listed |
| mailenable professional | = 1.14 | No fix listed |
| mailenable professional | = 1.15 | No fix listed |
| mailenable professional | = 1.16 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable professional | = 1.17 | No fix listed |
| mailenable professional | = 1.18 | No fix listed |
| mailenable professional | = 1.19 | No fix listed |
| mailenable professional | = 1.51 | No fix listed |
| mailenable professional | = 1.52 | No fix listed |
| mailenable professional | = 1.53 | No fix listed |
| mailenable professional | = 1.54 | No fix listed |
| mailenable professional | = 1.72 | No fix listed |
| mailenable professional | = 1.73 | No fix listed |
| mailenable professional | = 1.82 | No fix listed |
| mailenable professional | = 1.83 | No fix listed |
| mailenable professional | = 1.84 | No fix listed |
| mailenable professional | = 1.101 | No fix listed |
| mailenable professional | = 1.102 | No fix listed |
| mailenable professional | = 1.103 | No fix listed |
| mailenable professional | = 1.104 | No fix listed |
| mailenable professional | = 1.105 | No fix listed |
| mailenable professional | = 1.106 | No fix listed |
| mailenable professional | = 1.107 | No fix listed |
| mailenable professional | = 1.108 | No fix listed |
| mailenable professional | = 1.109 | No fix listed |
| mailenable professional | = 1.110 | No fix listed |
| mailenable professional | = 1.111 | No fix listed |
| mailenable professional | = 1.112 | No fix listed |
| mailenable professional | = 1.113 | No fix listed |
| mailenable professional | = 1.114 | No fix listed |
| mailenable professional | = 1.115 | No fix listed |
| mailenable professional | = 1.116 | No fix listed |
| mailenable professional | = 2.0 | No fix listed |
| mailenable professional | = 2.1 | No fix listed |
| mailenable professional | = 2.2 | No fix listed |
| mailenable professional | = 2.32 | No fix listed |
| mailenable professional | = 2.33 | No fix listed |
| mailenable professional | = 2.34 | No fix listed |
| mailenable professional | = 2.35 | No fix listed |
| mailenable professional | = 2.351 | No fix listed |
References
- 33191 vdb-entry
- 23998 patch third-party-advisory vendor-advisory
- secunia.com patch vendor-advisory
- 2258 third-party-advisory
- 20070214 Secunia Research: MailEnable Web Mail Client MultipleVulnerabilities mailing-list
- 22554 vdb-entry
- ADV-2007-0595 vdb-entry