CVE-2023-4594

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmindll.htm file...

PT-2023-29768 · Unknown · Qmailadmin

Name of the Vulnerable Software and Affected Versions: MailAdmin affected versions not specified Description: The issue is related to a Stored XSS vulnerability, which could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin...

BVRP Software Avanquest Software SLmail Cross-Site Scripting Vulnerability

BVRP Software Avanquest Software SLmail BVRP Software SLmail is an email server solution from BVRP Software, France. A cross-site scripting vulnerability exists in BVRP Software Avanquest Software SLmail version 5.5.0.4433. An attacker exploits the vulnerability to store a malicious JavaScript lo...

ismartgate PRO File Upload Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO version 1.5.9, which can be exploited by attackers to conduct privilege escalation attacks by appending PHP code to /cron/mailAdmin.php...

CVE-2020-12838

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...

Open Exchange default account

mailadmin/secret LDAP account is created during installation with /bin/bash login shell...