2 matches found
Sql injection
SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the selectmid parameter in an letgo.cgi request...
5CVSS6AI score0.01229EPSS
SaveExploits0References2Affected Software1
CVE-2018-17542: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the selectmid parameter in an letgo.cgi request...
5.3CVSS5.8AI score0.01229EPSS
SaveExploits0References2
20