GCVE - cpe:2.3:a:alt-n:worldclient:8.1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alt-n:worldclient:8.1.3:*:*:*:*:*:*:*

part: a version: 8.1.3 update: *

Vendor	Alt N (`d2850752-2767-5bcb-9b57-571bd6caa9b9`)
Product	Worldclient (`a1daefbb-8273-5546-bdb4-68d6ada64438`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6967`	vulnerable	2026-06-08 04:51:05.287170	Details available Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893. Published: 2009-08-13T16:00:00.000Z Updated: 2024-08-07T11:49:02.503Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/3206 http://secunia.com/advisories/32142 https://exchange.xforce.ibmcloud.com/vulnerabilities/46688 http://files.altn.com/MDaemon/Release/RelNotes_en.txt http://osvdb.org/50011	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4266`	vulnerable	2026-06-08 04:48:43.472188	Details available WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value. Published: 2005-12-15T11:00:00.000Z Updated: 2024-09-16T18:03:49.820Z Open on db.gcve.eu Reference links http://www.ipomonis.com/advisories/mdaemon.zip http://secunia.com/advisories/17990	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4209`	vulnerable	2026-06-08 04:48:43.235216	Details available WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability. Published: 2005-12-13T11:00:00.000Z Updated: 2024-08-07T23:38:51.696Z Open on db.gcve.eu Reference links http://www.ipomonis.com/advisories/mdaemon.zip http://www.securityfocus.com/bid/15815 https://exchange.xforce.ibmcloud.com/vulnerabilities/23551 http://secunia.com/advisories/17990	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.