Sql injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

Design/Logic Flaw

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

CVE-2020-10511

Technical details for CVE-2020-10511 are not publicly available in the provided connected documents. Monitor for updates from vendors/advisories; current sources only reiterate insecure configurations and crafted URL access without deeper root-cause or affected version specifics.

PT-2020-12181

Name of the Vulnerable Software and Affected Versions HGiga C&Cmail CCMAILQ versions before olln-base-6.0-418.i386.rpm HGiga C&Cmail CCMAILN versions before olln-base-5.0-418.i386.rpm Description The issue is related to insecure configurations in HGiga C&Cmail, which can be exploited by attackers...

PT-2020-12182

Name of the Vulnerable Software and Affected Versions HGiga C&Cmail CCMAILQ versions before olln-calendar-6.0-100.i386.rpm HGiga C&Cmail CCMAILN versions before olln-calendar-5.0-100.i386.rpm Description The issue allows attackers to inject SQL commands in the URL parameter to execute unauthorize...

CVE-2020-10511: Improper Neutralization of Special Elements used in an OS Command

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...