Lucene search
+L

67 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/04 8:58 a.m.5 views

CVE-2022-32963

OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

7.5CVSS6AI score0.01361EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/08/04 12:00 a.m.12 views

ITPison OMICARD EDM 信任管理问题漏洞

ITPison OMICARD EDM is a high-speed newsletter EDM marketing and distribution system from ITPison, China. A security vulnerability exists in ITPison OMICARD EDM. A remote attacker could exploit the vulnerability to send a serialized payload to the server using a machine key to execute arbitrary...

9.8CVSS8.8AI score0.01419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/04 12:00 a.m.13 views

PT-2022-22634 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The mail image relay function in OMICARD EDM has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and access arbitrary system files...

7.5CVSS7.8AI score0.01361EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/08/04 12:00 a.m.12 views

ITPison OMICARD EDM 路径遍历漏洞

ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison China. A security vulnerability exists in ITPison OMICARD EDM versions v5.8 to v6.0. The vulnerability stems from a path traversal in OMICARD EDM's Mail Image Forwarding feature, which can be...

7.5CVSS7.5AI score0.01361EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/04 12:00 a.m.9 views

PT-2022-21613 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue is related to a hard-coded machine key in OMICARD EDM. This allows an unauthenticated remote attacker to send a serialized payload to the server, which can result in the...

9.8CVSS9.3AI score0.01419EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/08/04 12:00 a.m.8 views

PT-2022-21612 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue is related to insufficient validation for user input in OMICARD EDM's API function. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, which can ...

9.8CVSS9.4AI score0.01381EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/08/04 12:00 a.m.10 views

PT-2022-21611 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue concerns a path traversal vulnerability in OMICARD EDM's mail file relay function. This vulnerability can be exploited by an unauthenticated remote attacker to bypass...

7.5CVSS7.8AI score0.01361EPSS
SaveExploits0References5
Rows per page
Query Builder