70 matches found
CVE-2021-20618
Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors...
CVE-2021-20618
CVE-2021-20618 affects acmailer and acmailer DB: Privilege chaining that allows remote attackers to bypass authentication and gain administrative privileges, potentially exposing sensitive server data. Affected versions: acmailer 4.0.2 and earlier; acmailer DB 1.1.4 and earlier. Documented impact...
CVE-2021-20617
CVE-2021-20617 concerns Acmailer and Acmailer DB with an improper access control flaw that allows remote attackers to execute arbitrary OS commands or escalate privileges (CWE-284). Affected versions are Acmailer 4.0.1 and earlier and Acmailer DB 1.1.3 and earlier; the issue enables command execu...
CVE-2021-20617
Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified...
Multiple vulnerabilities in acmailer
Overview acmailer provided by Seeds Co.,Ltd. contains multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2021-20617 Privilege Chaining CWE-268 - CVE-2021-20618 ma.la reported these vulnerabilities to the developer, and also to IPA in order to notify users of its solution...
PT-2021-14078
Name of the Vulnerable Software and Affected Versions: acmailer versions 4.0.1 and earlier acmailer DB versions 1.1.3 and earlier Description: The issue allows remote attackers to execute an arbitrary OS command or gain administrative privilege, potentially resulting in the obtaining of sensitive...
Seeds Acmailer Db and Seeds Acmailer Security Vulnerabilities
Seeds Acmailer and Seeds Acmailer Db are both products of Seeds Japan, Seeds Acmailer is a CGI software for supporting mail services, Seeds Acmailer Db is a CGI software for supporting mail services. This software will add Mysql database connectivity compared to the standard version and will...
Seeds Acmailer and Seeds Acmailer Db Authorization Issues Vulnerabilities
Seeds Acmailer and Seeds Acmailer Db are both products of Seeds Japan, Seeds Acmailer is a CGI software for supporting mail services, Seeds Acmailer Db is a CGI software for supporting mail services. This software will add Mysql database connectivity compared to the standard version and will...
JVN#35906450: Multiple vulnerabilities in acmailer
acmailer provided by Seeds Co.,Ltd. contains multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2021-20617 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5...
Seeds acmailer Arbitrary Command Execution Vulnerability
Seeds acmailer is a suite of mobile email applications from Seeds Japan. A security vulnerability exists in Seeds acmaile that allows remote attackers to submit a special request to execute arbitrary OS commands...
CVE-2016-1142
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2016-1142
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
Design/Logic Flaw
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2016-1142
CVE-2016-1142 affects Seeds acmailer. Connected documents confirm an OS command injection (CWE-78) vulnerability in Seeds acmailer prior to 3.8.21 and 3.9.x prior to 3.9.15 Beta, exploitable by an authenticated remote attacker to execute arbitrary commands on the server via unspecified vectors. A...
CVE-2016-1142
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
acmailer vulnerable to OS command injection
Overview acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Kazuhiro Shibuta of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
JVN#50899877: acmailer vulnerable to OS command injection
acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Impact An authenticated attacker may execute an arbitrary OS command on the server. Solution Update the software Update to the latest version according to the information provided by the developer. Products...
Seeds acmailer Delete Arbitrary File Vulnerability
acmailer is asp-type mail delivery is different from the mail delivery system that you set up on your website. Seeds acmailer 3.8.18 before the version and 3.9.12 ,Beta before the 3.9.x version of a security vulnerability, remote attackers can be exploited with the help of specially crafted strin...
Directory traversal
Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...