Sql injection

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the selectmid parameter in an letgo.cgi request...

PT-2019-9501

Name of the Vulnerable Software and Affected Versions MailSherlock versions prior to 1.5.235 Description The issue allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise. This is achieved via the select mid parameter in an "letgo.cgi" request,...

CVE-2018-17542: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the selectmid parameter in an letgo.cgi request...