116 matches found
HGiga MailSherlock 操作系统命令注入漏洞
Hgiga MailSherlock is an enterprise email auditing system from China Henderson Technology Hgiga. HGiga MailSherlock version 4.5 suffers from an operating system command injection vulnerability, which originates from an insufficient filtering of user input by the query function. An attacker could...
CVE-2023-24839: Improper Neutralization of Input During Web Page Generation
HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack...
PT-2023-19819 · Hgiga · Hgiga Mailsherlock
Name of the Vulnerable Software and Affected Versions: HGiga MailSherlock affected versions not specified Description: The issue is related to insufficient access control, allowing an unauthenticated remote user to access partial content of another user's mail. This can be achieved by modifying t...
CVE-2023-24842 HGiga MailSherlock - Broken Access Control
HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...
CVE-2023-24842: Authorization Bypass Through User-Controlled Key
HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...
PT-2023-8668 · Unknown · Mailsherlock
Name of the Vulnerable Software and Affected Versions: MailSherlock affected versions not specified Description: The issue is related to insufficient filtering for user input in the MailSherlock query function for connection logs. This allows an authenticated remote attacker with administrator...
CVE-2023-24839
HGiga MailSherlock is affected by CVE-2023-24839: the vulnerability is a reflected XSS caused by insufficient input filtering in a specific function. An unauthenticated remote attacker could inject JavaScript through user input. The available documents confirm the vulnerability exists and describ...
HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-25618)
Hgiga MailSherlock is a set of enterprise mail audit system from Henderson Hgiga, China. HGiga MailSherlock suffers from a SQL injection vulnerability, which stems from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by an attacker ...
CVE-2021-22848
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege...
CVE-2021-22848 HGiga MailSherlock - SQL Injection-2
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege...
CVE-2021-22848
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege...
CVE-2021-22848: Improper Neutralization of Special Elements used in an SQL Command
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege...
HGiga MailSherlock Cross-Site Scripting Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A cross-site scripting vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock not validating user parameters on multiple login pages. An attacker can explo...
HGiga MailSherlock Cross-Site Scripting Vulnerability (CNVD-2021-06947)
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A cross-site scripting vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock failing to properly validate specific URL parameters. An attacker can exploit...
HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-05402)
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. HGiga MailSherlock suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to inject and execute SQL commands in URL parameters...
HGiga MailSherlock Command Injection Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A command injection vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock failing to properly validate specific parameters. An attacker can exploit this...
HGiga MailSherlock Weak Authentication Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A weak authentication vulnerability exists in HGiga MailSherlock. An attacker can exploit this vulnerability to elevate privileges using a default password generation mechanism...
CVE-2020-25850
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...
