Lucene search
+L

43 matches found

CVE
CVE
•added 2020/11/01 5:10 p.m.•74 views

CVE-2020-25849

The CVE-2020-25849 entry describes a Command Injection vulnerability in MailGates and MailAudit products. The issue allows an attacker to inject and execute system commands via the CGI parameter after obtaining the user’s access token. No affected product versions, root-cause details, or remediat...

9CVSS9.2AI score0.02231EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/01 12:00 a.m.•11 views

CVE-2020-25849: Improper Neutralization of Special Elements used in an OS Command

MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token...

9CVSS6AI score0.02231EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/11/01 12:00 a.m.•6 views

PT-2020-16244

Name of the Vulnerable Software and Affected Versions MailGates and MailAudit products affected versions not specified Description The issue allows attackers to inject and execute system commands from the cgi parameter after obtaining the user's access token. This can be used to exploit the syste...

9CVSS0.02231EPSS
SaveExploits0References4
Rows per page
Query Builder