PT-2023-18765 · Openfind · Openfind Mail2000

Name of the Vulnerable Software and Affected Versions: Openfind Mail2000 affected versions not specified Description: The issue is related to insufficient filtering for user input in the file uploading function. This allows an authenticated remote attacker with general user privilege to inject...

CVE-2023-22902

Openfind Mail2000 is affected by a Cross-Site Scripting (XSS) vulnerability arising from insufficient input filtering in the file upload function. The issue allows an authenticated remote attacker with general user privileges to inject JavaScript, as described in CVE-2023-22902 across multiple so...

CVE-2023-22902: Improper Neutralization of Input During Web Page Generation

Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject JavaScript, conducting an XSS attack...

CVE-2020-25849 Openfind MailGates/MailAudit - Command Injection

MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token...

CVE-2020-12776

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...

CVE-2020-12776

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...

Improper access control

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...

CVE-2020-12776 Openfind Mail2000 - Broken Access Control

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...

CVE-2020-12776

CVE-2020-12776 affects Openfind Mail2000 and is described as a Broken Access Control vulnerability that can enable unauthorized command execution after an attacker obtains an administrator access token or cookie. The available documents provide a high-severity impact (CVE is associated with high ...

PT-2020-13258

Name of the Vulnerable Software and Affected Versions Openfind Mail2000 affected versions not specified Description The issue allows attackers to execute unauthorized commands after obtaining the administrator access token or cookie, due to broken access control. Recommendations At the moment,...

CVE-2020-12776: Undefined Security Weakness

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...

CVE-2020-12782

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

CVE-2020-12782

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

Command injection

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

CVE-2020-12782 Openfind MailGates - Command Injection

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

CVE-2020-12782

Openfind MailGates is affected by a Command Injection flaw. According to the CVE description, when receiving an email containing specific strings, malicious code in the mail attachment may be triggered, granting unauthorized access to system files. The issue is reported with CVSS data indicating ...

PT-2020-13264

Name of the Vulnerable Software and Affected Versions Openfind MailGates affected versions not specified Description The issue is related to a Command Injection flaw. When Openfind MailGates receives an email with specific strings, malicious code in the mail attachment can be triggered, allowing...

CVE-2020-12782: Improper Neutralization of Special Elements used in a Command

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

CVE-2019-15073 Openfind MAIL2000 Webmail Pre-Auth Open Redirect

An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This vulnerability affects many mail system of governments, organizations, companies and universities...

Openfind Mail2000 Open Redirect Vulnerability

Openfind Mail2000 is a Web-based e-mail system. An input validation error vulnerability exists in the '/cgi-bin/go' page in Openfind Mail2000 versions 6.0 and earlier and 7.0 and earlier. The vulnerability stems from a network system or product that does not properly validate incoming data. An...