116 matches found
CVE-2020-35743
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
CVE-2020-35851
HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system...
CVE-2020-35740
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks...
CVE-2020-35741
HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks...
CVE-2020-25850
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...
CVE-2020-35851
HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system...
CVE-2020-25848
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism...
CVE-2020-35742
HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter...
CVE-2020-35740
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks...
Sql injection
HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter...
Code injection
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...
Sql injection
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
Hardcoded credentials
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks...
CVE-2020-35851
HGiga MailSherlock is affected by CVE-2020-35851: a vulnerability where the product does not validate specific parameters properly, enabling remote command injection and arbitrary command execution. The issue is documented across multiple sources (e.g., CNVD-2021-06950, NVD, CVE lists) and is des...
CVE-2020-35851 HGiga MailSherlock - Command Injection
HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system...
CVE-2020-35742
HGiga MailSherlock contains a SQL Injection vulnerability: an attacker can inject and execute SQL commands via a URL parameter. This is evidenced across multiple sources (CVE-2020-35742 and CNVD/NVD entries) describing the issue in MailSherlock as an SQL injection flaw in URL handling. The attack...
CVE-2020-35742 HGiga MailSherlock - SQL Injection -1
HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter...
CVE-2020-35743 HGiga MailSherlock - SQL Injection -3
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
CVE-2020-35743
HGiga MailSherlock is affected by a SQL injection vulnerability in URL parameters of specific CGI pages. The CVE-2020-35743 entry notes attackers can inject and execute SQL commands via these parameters. NVD data lists CVSS‑3.1 base score 7.6 (HIGH), with NETWORK exposure, LOW privileges required...
CVE-2020-35741
HGiga MailSherlock contains a cross-site scripting (XSS) vulnerability: it does not validate user parameters on multiple login pages, allowing an attacker to inject JavaScript syntax. The CVE entry CVE-2020-35741 is documented across multiple sources (NVD and CNVD) with this behavior. Impact deta...