Hardcoded credentials

2020-12-3108:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

33.8%

JSON

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.

CPENameOperatorVersion
msr45_isherlock-antispameq< 4.5-133
msr45_isherlock-usereq< 4.5-120
ssr45_isherlock-antispameq< 4.5-133
ssr45_isherlock-usereq< 4.5-120

Name	Operator	Version
msr45_isherlock-antispam	eq	< 4.5-133
msr45_isherlock-user	eq	< 4.5-120
ssr45_isherlock-antispam	eq	< 4.5-133
ssr45_isherlock-user	eq	< 4.5-120

References

www.twcert.org.tw/tw/cp-132-4259-90f23-1.html

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for PRION:CVE-2020-35740