CVE-2021-20617: Undefined Security Weakness

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified...

Seeds Acmailer Db and Seeds Acmailer Security Vulnerabilities

Seeds Acmailer and Seeds Acmailer Db are both products of Seeds Japan, Seeds Acmailer is a CGI software for supporting mail services, Seeds Acmailer Db is a CGI software for supporting mail services. This software will add Mysql database connectivity compared to the standard version and will...

Seeds acmailer Arbitrary Command Execution Vulnerability

Seeds acmailer is a suite of mobile email applications from Seeds Japan. A security vulnerability exists in Seeds acmaile that allows remote attackers to submit a special request to execute arbitrary OS commands...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1142

CVE-2016-1142 affects Seeds acmailer. Connected documents confirm an OS command injection (CWE-78) vulnerability in Seeds acmailer prior to 3.8.21 and 3.9.x prior to 3.9.15 Beta, exploitable by an authenticated remote attacker to execute arbitrary commands on the server via unspecified vectors. A...

CVE-2016-1142: Improper Neutralization of Special Elements used in an OS Command

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PT-2016-4600

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For acmailer versions prior to 3.8.21, update to version...

acmailer vulnerable to OS command injection

Overview acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Kazuhiro Shibuta of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

JVN#50899877: acmailer vulnerable to OS command injection

acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Impact An authenticated attacker may execute an arbitrary OS command on the server. Solution Update the software Update to the latest version according to the information provided by the developer. Products...

Seeds acmailer Delete Arbitrary File Vulnerability

acmailer is asp-type mail delivery is different from the mail delivery system that you set up on your website. Seeds acmailer 3.8.18 before the version and 3.9.12 ,Beta before the 3.9.x version of a security vulnerability, remote attackers can be exploited with the help of specially crafted strin...

Directory traversal

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

CVE-2015-2971

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

CVE-2015-2971

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

CVE-2015-2971

CVE-2015-2971 affects Seeds acmailer: directory traversal vulnerability in acmailer prior to 3.8.18 and 3.9.x prior to 3.9.12 Beta. An authenticated remote attacker can delete arbitrary server files via a crafted string. The issue originates from improper file path handling in the affected compon...

CVE-2015-2971: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

PT-2015-6018

Name of the Vulnerable Software and Affected Versions Seeds acmailer versions prior to 3.8.18 Seeds acmailer versions 3.9.x prior to 3.9.12 Beta Description A directory traversal issue allows remote authenticated users to delete arbitrary files by using a crafted string. Recommendations For Seeds...

acmailer vulnerable to directory traversal

Overview acmailer provided by Seeds Co.,Ltd. contains a directory traversal CWE-22 vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An authenticated attacker may delete files on the...