89 matches found
Acmailer - Improper Access Control to OS Command Injection
Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
CVE-2026-70408
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
Multiple vulnerabilities in acmailer
Overview acmailer provided by Extra Innovation Inc. contains multiple vulnerabilities listed below: Cross-site Scripting CWE-79 - CVE-2026-66358 Incorrect Authorization CWE-863 - CVE-2026-70408 CVE-2026-66358 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. and Fumiya Funakoshi reported this...
EUVD-2026-62238
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-70408
acmailer has an incorrect authorization flaw allowing low-privilege users to create sub-accounts with full administrative privileges (CVSS 8.8 HIGH, network-accessible). JPCERT/CC advisory JVN47716829 and vendor notice are referenced; no exploit or patch details are provided in the documents. Mon...
CVE-2026-70408
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-70408
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-66358
acmailer has a cross-site scripting (XSS) vulnerability allowing an unauthenticated remote attacker to inject arbitrary script. CVSS 3.0 scores it MEDIUM (6.1) with user interaction required. No in-the-wild exploitation or specific affected versions are reported; monitor vendor advisories for pat...
EUVD-2026-62237
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
CVE-2026-66358: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
PT-2026-78268
Name of the Vulnerable Software and Affected Versions acmailer affected versions not specified Description A cross-site scripting XSS issue exists, which may allow an attacker to execute an arbitrary script. Cross-site scripting is a type of security flaw where malicious scripts are injected into...
PT-2026-78269
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-70408: Incorrect Authorization
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2023-49780
Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product...
EUVD-2014-3833
Malware in sbrugna...
EUVD-2015-3054
Malware in sbrugna...