Design/Logic Flaw

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

Command injection

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

Code injection

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-6830

CVE-2013-6830 affects PineApp Mail-SeCure before version 3.70 on 5099SK and earlier platforms. A vulnerability in the admin/confnetworking.html page allows remote attackers to inject shell commands via the nsserver parameter during an nslookup request due to insufficient input sanitization of met...

CVE-2013-6829

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-6827

CVE-2013-6827 affects PineApp Mail-SeCure appliances, with an absolute path traversal in the admin/viewmsg.php endpoint. The vulnerability allows an attacker to read arbitrary files by supplying a full pathname in the msg parameter. The issue is confirmed by multiple feeds in the connected docume...

CVE-2013-6831

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6831

CVE-2013-6831 affects PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms. The sudoers configuration allows local users to gain privileges via a sudo command that leverages access to the qmailq account. The provided connected documents corroborate the affected product/version and...

CVE-2013-6830

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

CVE-2013-6829

CVE-2013-6829 describes a remote command injection in PineApp Mail-SeCure via the admin/confnetworking.html interface. The vulnerability allows an attacker to append shell metacharacters in the pinghost parameter during a ping operation, leading to arbitrary command execution on the remote host. ...

CVE-2013-6828

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

CVE-2013-6828

CVE-2013-6828 : The connected sources confirm a remote authentication-bypass vulnerability in PineApp Mail-SeCure, where accessing the admin/management.html page allows bypassing authentication and performing a sys_usermng operation via the it parameter. Affected component: admin interface of Pin...

PT-2013-6136

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue is related to an absolute path traversal vulnerability. It affects the admin/viewmsg.php file and allows remote attackers to read arbitrary files. This is achieved by...

PT-2013-6140

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure versions 3.70 and earlier Description The issue is related to a sudoers file that does not properly restrict user specifications. This allows local users to gain privileges via a sudo command that leverages access to the...

PT-2013-6138

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters in the pinghost parameter during a ping operation, specifically...

CVE-2013-6828: Improper Authentication

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

PT-2013-6137

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue allows remote attackers to bypass authentication and perform certain operations. Specifically, it involves the admin/management.html page and the it parameter, which can...

CVE-2013-6831: Undefined Security Weakness

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6827: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter...

CVE-2013-6829: Improper Control of Generation of Code

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...