Multiple Vulnerabilities in Uebimiau <= 2.7.11
Open redirect and reflected Cross-Site Scripting in UebiMiau webmail.
Antecedentes
UebiMiau is an IMAP- and POP3-compatible webmail client that can be installed without additional PHP modules or a separate database. It is open-source software licensed under the GPL. It has not been developed since March 2006 and does not work with PHP 5.3 due to the use of deprecated functions; a new derivative project based on jimjag's patches exists.
Description
Uebimiau 2.7.11 and earlier versions contain a flaw that allows remote redirection because the application does not sanitize the redir.php file: a manipulated URL can be created that, when clicked, redirects the victim from the legitimate site to an arbitrary site chosen by the attacker. In addition, a reflected XSS has been detected that allows the execution of HTML/JavaScript code in the victim's browser through the f_email parameter of index.php and the selected_theme parameter of error.php.
Business impact
Redirection: an attacker can redirect any user to a malicious site. XSS: an attacker can execute arbitrary HTML or JavaScript in a user's browser, which can be used to steal sensitive information such as credentials or personal data.
Affected systems
All versions of Uebimiau.
Solución
Validate all data received by the application that the user can modify before using it.
Calendario de divulgación
References
The information contained within this advisory is supplied 'as-is' with no warranties or guarantees of fitness for use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.
Company based in Spain and Colombia, specializing in web application auditing, network security, penetration testing, and compliance implementation and assessment. Our clients include some of the largest finance, telecommunications, insurance, and ICT companies. A vendor-independent provider with in-depth experience since 2001. Our R&D efforts include vulnerability research, collaboration on open security projects, whitepapers, and participation in industry events.
Would you like us to review your product?
Contact usDo you need a security audit?
Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.
Request information
Our offices
Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)