CVE-2026-2234

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content...

CVE-2026-2236

CVE-2026-2236 affects C&Cm@il by HGiga. The provided documents describe an unauthenticated SQL Injection in the web application that enables reading database contents. No explicit root-cause details or affected versions are given beyond the product name. Exploitation status is not detailed beyond...

CVE-2026-2235

CVE-2026-2235 affects C&Cm@il (HGiga). The vulnerability is a SQL Injection in the application that allows authenticated remote attackers to inject arbitrary SQL to read database contents. It is documented across multiple sources (NVD, CVE List, Attackers KB, PT Security) with the same descriptio...

EUVD-2020-2965

Malware in sbrugna...

EUVD-2020-2964

Malware in sbrugna...

CVE-2020-10511

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

CVE-2020-10512

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

Sql injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

Design/Logic Flaw

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

CVE-2020-10512

CVE-2020-10512 affects HGiga C&Cmail CCMAILQ (before olln-calendar-6.0-100.i386.rpm) and CCMAILN (before olln-calendar-5.0-100.i386.rpm). It is a SQL injection vulnerability in a URL parameter that allows an attacker to inject SQL commands to execute unauthorized commands. The CVSS context indica...

CVE-2020-10512 HGiga C&Cmail - SQL Injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

CVE-2020-10511 HGiga C&Cmail - Broken Access Control

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

PT-2020-12181

Name of the Vulnerable Software and Affected Versions HGiga C&Cmail CCMAILQ versions before olln-base-6.0-418.i386.rpm HGiga C&Cmail CCMAILN versions before olln-base-5.0-418.i386.rpm Description The issue is related to insecure configurations in HGiga C&Cmail, which can be exploited by attackers...

PT-2020-12182

Name of the Vulnerable Software and Affected Versions HGiga C&Cmail CCMAILQ versions before olln-calendar-6.0-100.i386.rpm HGiga C&Cmail CCMAILN versions before olln-calendar-5.0-100.i386.rpm Description The issue allows attackers to inject SQL commands in the URL parameter to execute unauthorize...

CVE-2020-10512: Improper Neutralization of Special Elements used in an SQL Command

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

CVE-2020-10511: Improper Neutralization of Special Elements used in an OS Command

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...