Rapid7 MailCleaner Information Disclosure Vulnerability

Rapid7 MailCleaner is a set of penetration testing frameworks from the U.S. company Rapid7. The framework supports vulnerability validation and security assessment and so on. Rapid7 MailCleaner c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 Previous versions of NewslettersController.php file...

CVE-2019-1010246

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure e.g. username, password. The component is: The API call in the function allowAction in...

PT-2019-11525

Name of the Vulnerable Software and Affected Versions: MailCleaner versions prior to c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 Description: The issue allows for unauthenticated disclosure of MySQL database password information. This can lead to the disclosure of MySQL database content, including...