CVE-2024-4296

The CVE-2024-4296 entry concerns HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock). The vulnerability arises from inadequate filtering of special characters in certain function parameters in the account management interface, enabling remote attackers with administrative privil...

CVE-2024-4296 HGiga iSherlock - Arbitrary File Download

The account management interface of HGiga iSherlock including MailSherlock, SpamSherlock, AuditSherlock fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability to download arbitrary system files...

HGiga iSherlock 路径遍历漏洞

HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. A path traversal vulnerability exists in HGiga iSherlock, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to download arbitrary system files...

HGiga iSherlock 安全漏洞

HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. A security vulnerability exists in HGiga iSherlock, which originates from a command injection vulnerability in the email search interface. The vulnerability can be exploited to execute arbitrary system...

HGiga iSherlock 路径遍历漏洞

HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. A path traversal vulnerability exists in HGiga iSherlock, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to download arbitrary system files...

HGiga iSherlock 操作系统命令注入漏洞

HGiga iSherlock is a series of software products from China's HGiga Technology HGiga Company. HGiga iSherlock has an operating system command injection vulnerability, which originates from an operating system command injection vulnerability in the system configuration interface. An attacker can...

PT-2024-30244

Name of the Vulnerable Software and Affected Versions HGiga iSherlock versions affected versions not specified MailSherlock versions affected versions not specified SpamSherock versions affected versions not specified AuditSherlock versions affected versions not specified Description The system...

PT-2024-30231

Name of the Vulnerable Software and Affected Versions HGiga iSherlock including MailSherlock, SpamSherlock, AuditSherlock affected versions not specified Description The system configuration interface of HGiga iSherlock fails to filter special characters in certain function parameters, allowing...

PT-2024-30226

Name of the Vulnerable Software and Affected Versions HGiga iSherlock including MailSherlock, SpamSherlock, AuditSherlock affected versions not specified Description The account management interface of HGiga iSherlock fails to filter special characters in certain function parameters, allowing...

PT-2024-30235

Name of the Vulnerable Software and Affected Versions HGiga iSherlock including MailSherlock, SpamSherlock, AuditSherlock affected versions not specified Description The email search interface of HGiga iSherlock fails to filter special characters in certain function parameters, allowing remote...

CVE-2023-37292

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in HGiga iSherlock 4.5 iSherlock-user modules, HGiga iSherlock 5.5 iSherlock-user modules allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock...

CVE-2023-37292

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in HGiga iSherlock 4.5 iSherlock-user modules, HGiga iSherlock 5.5 iSherlock-user modules allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock...

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in HGiga iSherlock 4.5 iSherlock-user modules, HGiga iSherlock 5.5 iSherlock-user modules allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock...

CVE-2023-37292 HGiga iSherlock - Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in HGiga iSherlock 4.5 iSherlock-user modules, HGiga iSherlock 5.5 iSherlock-user modules allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock...

CVE-2023-37292

CVE-2023-37292 affects HGiga iSherlock software. The OS Command Injection vulnerability arises from improper neutralization of special elements in iSherlock-user modules. Affected versions are iSherlock 4.5 (before iSherlock-user-4.5-174) and iSherlock 5.5 (before iSherlock-user-5.5-174). Consequ...

CVE-2023-37292 HGiga iSherlock - Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in HGiga iSherlock 4.5 iSherlock-user modules, HGiga iSherlock 5.5 iSherlock-user modules allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock...

HGiga iSherlock 操作系统命令注入漏洞

HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. An operating system command injection vulnerability exists in HGiga iSherlock version 4.5, which originates from allowing operating system command injection...

PT-2023-25890 · Hgiga · Isherlock

Name of the Vulnerable Software and Affected Versions: HGiga iSherlock versions 4.5 before iSherlock-user-4.5-174 HGiga iSherlock versions 5.5 before iSherlock-user-5.5-174 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS...