4 matches found
CVE-2026-8128
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made...
CVE-2013-6827
CVE-2013-6827 affects PineApp Mail-SeCure appliances, with an absolute path traversal in the admin/viewmsg.php endpoint. The vulnerability allows an attacker to read arbitrary files by supplying a full pathname in the msg parameter. The issue is confirmed by multiple feeds in the connected docume...
CVE-2013-6827: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter...
PT-2013-6136
Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue is related to an absolute path traversal vulnerability. It affects the admin/viewmsg.php file and allows remote attackers to read arbitrary files. This is achieved by...