CVE-2013-6028

Published: Jan 12, 2014Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts, (2) modify user accounts, (3) delete user accounts, or (4) stop the product's service.

Affected (32)

Products: Atmail: Atmail

Atmail

1 product

Atmail

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Atmail Atmail	Up to 7.1.6
Atmail Atmail	Version 6.20.10
Atmail Atmail	Version 6.20.11
Atmail Atmail	Version 6.20.12
Atmail Atmail	Version 6.20.13
Atmail Atmail	Version 6.20.4
Atmail Atmail	Version 6.20.5
Atmail Atmail	Version 6.20.6
Atmail Atmail	Version 6.20.7
Atmail Atmail	Version 6.20.8
Atmail Atmail	Version 6.3.0
Atmail Atmail	Version 6.3.1
Atmail Atmail	Version 6.3.2
Atmail Atmail	Version 6.3.3
Atmail Atmail	Version 6.3.4
Atmail Atmail	Version 6.3.5
Atmail Atmail	Version 6.3.6
Atmail Atmail	Version 6.4.0
Atmail Atmail	Version 6.4.1
Atmail Atmail	Version 6.4.2
Atmail Atmail	Version 6.5.0
Atmail Atmail	Version 6.6.0
Atmail Atmail	Version 6.6.1
Atmail Atmail	Version 6.6.2
Atmail Atmail	Version 6.6.3
Atmail Atmail	Version 6.6.4
Atmail Atmail	Version 7.1.0
Atmail Atmail	Version 7.1.1
Atmail Atmail	Version 7.1.2
Atmail Atmail	Version 7.1.3
Atmail Atmail	Version 7.1.4
Atmail Atmail	Version 7.1.5