2 matches found
Missing hostname validation in mailer
mailer 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections. mailer 1.32.1 validates the SMTP hostname when connecting via TLS by default. In...
5.8CVSS5.2AI score0.00959EPSS
SaveExploits0Affected Software1
Omnistar Mailer Software Multiple SQLi Vulnerabilities
Omnistar Mailer Softwar is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
8.4AI score
SaveExploits0References3
20