4 matches found
PT-2018-13129
Name of the Vulnerable Software and Affected Versions Bloop Airmail 3 version 3.5.9 Description An issue in the "send" command of the airmail:// URL scheme allows external applications to send arbitrary emails from an active account without user prompt. The command accepts URL parameters with the...
CVE-2012-4495
The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments...
CVE-2012-4495: Undefined Security Weakness
The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments...
CVE-2005-4343: Undefined Security Weakness
Adobe formerly Macromedia ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability"...