Lucene search
K

8 matches found

Packet Storm
Packet Storm
added 2012/07/13 12:0 a.m.32 views

Hastymail 2.1.1 RC1 Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Hastymail 2.1.1 R...

7.5CVSS6.5AI score0.26063EPSS
Exploits9
Circl
Circl
added 2012/07/12 12:0 a.m.12 views

CVE-2011-4542

creationtimestamp| type| source ---|---|--- 2012-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19758 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/hastymailexec.rb 2025-02-06 03:13:40+00:00| seen|...

7.5CVSS5.7AI score0.26063EPSS
Exploits9References2
Exploit DB
Exploit DB
added 2012/07/12 12:0 a.m.31 views

Hastymail 2.1.1 RC1 - Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Hastymail 2.1.1 R...

7.5CVSS7AI score0.26063EPSS
Exploits9
Saint
Saint
added 2011/12/28 12:0 a.m.39 views

Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

7.5CVSS7.1AI score0.26063EPSS
Exploits9
Saint
Saint
added 2011/12/28 12:0 a.m.28 views

Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

7.5CVSS7.1AI score0.26063EPSS
Exploits9
Saint
Saint
added 2011/12/28 12:0 a.m.20 views

Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

7.5CVSS7.1AI score0.26063EPSS
Exploits9
CVE
CVE
added 2011/11/30 2:0 a.m.59 views

CVE-2011-4542

The CVE-2011-4542 vulnerability affects Hastymail2 2.1.1 prior to RC2, enabling remote command execution via unsanitized inputs in the rs and rsargs[] parameters of the Drafts action at the default URI. The root cause is improper sanitization of user-supplied input, allowing arbitrary commands to...

7.5CVSS7.6AI score0.26063EPSS
Exploits9References2Affected Software1
OpenVAS
OpenVAS
added 2011/11/25 12:0 a.m.29 views

Hastymail 'rs' and 'rsargs[]' Parameters Remote Code Injection Vulnerabilities

The host is running Hastymail2 and is prone to remote code injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamremotecodeinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Hastymail 'rs' and 'rsargs' Parameters Remote Code Injection Vulnerabilities Authors: Sooraj KS...

7.5CVSS0.7AI score0.26063EPSS
Exploits9References3
Rows per page
Query Builder