Aleksander Machniak 7daf5aa9c1 Fix IMAP Injection + CSRF bypass in mail search ...

Reported by Martila Security Research Team

2026-03-18 12:47:00 +01:00

..

addcontact.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

attachment_delete.php

Remove redundant if statement (#8119)

2021-07-20 11:04:46 +02:00

attachment_display.php

PHP8 fixes, regression fixes

2020-12-13 12:14:15 +01:00

attachment_rename.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

attachment_upload.php

PHP8 fixes, regression fixes

2020-12-13 12:14:15 +01:00

autocomplete.php

PHP8 fixes, regression fixes

2020-12-13 12:14:15 +01:00

bounce.php

Warn the user about a potential data leak on mail bounce or forward (#7993)

2021-05-01 12:45:31 +02:00

check_recent.php

Fix so message flags are updated on refresh also for multifolder search results (#7774)

2021-01-31 10:25:49 +01:00

compose.php

Fix XSS vulnerability in post-processing of sanitized HTML content [CVE-2024-42009]

2024-08-04 10:29:58 +02:00

copy.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

delete.php

PHP8 fixes

2020-12-19 14:27:59 +01:00

folder_expunge.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

folder_purge.php

Make the Purge (Empty) action available for every non-empty folder, not only Trash (#7948)

2021-05-02 11:07:20 +02:00

get.php

- Fix XSS vulnerability in serving of attachments other than HTML or SVG [CVE-2024-42008]

2024-08-04 10:30:06 +02:00

getunread.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

group_expand.php

Add array_first() helper, fix some code issues

2020-12-20 09:44:17 +01:00

headers.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

import.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

index.php

Fix PHP5 compat.

2024-08-04 11:11:22 +02:00

list_contacts.php

Rename session items 'search' and 'search_params' to 'contact_search' and 'contact_search_params'

2021-09-11 09:13:39 +02:00

list.php

Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences

2024-05-19 10:19:22 +02:00

mark.php

Fix PHP8 warning (#9071)

2023-07-28 12:19:26 +02:00

move.php

Fix various PHP8 warnings (#8392)

2022-01-11 19:06:24 +01:00

pagenav.php

Steps -> Actions refactoring (#7688)

2020-11-01 11:25:38 +01:00

search_contacts.php

Fix some PHP8 compatibility issues (#8363)

2021-12-17 18:53:48 +01:00

search.php

Fix IMAP Injection + CSRF bypass in mail search

2026-03-18 12:47:00 +01:00

send.php

Fix IMAP Injection + CSRF bypass in mail search

2026-03-18 12:47:00 +01:00

sendmdn.php

Add array_first() helper, fix some code issues

2020-12-20 09:44:17 +01:00

show.php

Fix XSS vulnerability in post-processing of sanitized HTML content [CVE-2024-42009]

2024-08-04 10:29:58 +02:00

viewsource.php

Fix cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download

2023-11-04 17:58:08 +01:00