Summary
NuralStorm Webmail is prone to multiple security vulnerabilities.
An attacker can exploit these vulnerabilities to obtain potentially sensitive information, create or delete arbitrary files, send unsolicited bulk email to users, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, disclose or modify sensitive information, or upload arbitrary code and run it in the context of the webserver process. Other attacks are also possible.
Webmail 0.985b is vulnerable
other versions may also be affected.
References
Updated on 2017-03-28
