CVE-2013-6028

CVE-2013-6028 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Atmail Webmail Server versions prior to 7.2. An unauthenticated attacker could exploit these flaws to hijack an administrator's session. This allows for unauthorized actions such as adding, modifying, or deleting user accounts, and even stopping the webmail service. Despite a CVSS score of 6.8 (medium severity), indicating potential for partial confidentiality, integrity, and availability impact, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion.