Path traversal

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2023-48380 Softnext Mail SQR Expert - Command Injection

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...

CVE-2023-48380 Softnext Mail SQR Expert - Command Injection

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...

CVE-2023-48380

The CVE-2023-48380 entry concerns Softnext Mail SQR Expert, an email management platform. The vulnerability arises from insufficient filtering of a special character within a specific function, enabling an adjacent-authenticated remote attacker to perform command injections and execute arbitrary ...

CVE-2023-48379

CVE-2023-48379 affects Softnext Mail SQR Expert. The vulnerability arises from inadequate filtering of a specific URL parameter within a specific function, enabling an unauthenticated remote attacker to perform a Blind SSRF and infer internal network topology from URL error responses. Reported ac...

CVE-2023-48379 Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

CVE-2023-48378

CVE-2023-48378 concerns Softnext Mail SQR Expert, where a path traversal flaw in a URL parameter allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files. The vulnerability is described with CVSS v3.1 base score 7.5 (High) and network attack vector wi...

CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

PT-2023-30804 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...

CVE-2023-46116: Improper Input Validation

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

Softnext Technologies Mail SQR Expert Operating System Command Injection Vulnerability

Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies. Softnext Technologies Mail SQR Expert v230330 prior version suffers from an operating system command injection vulnerability, which stems from insufficient special charact...

PT-2023-30807

Name of the Vulnerable Software and Affected Versions Softnext Mail SQR Expert affected versions not specified Description The issue is related to insufficient filtering for a special character within a specific function in Softnext Mail SQR Expert, an email management platform. A remote attacker...

CVE-2023-48381: Improper Limitation of a Pathname to a Restricted Directory

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion LFI vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify...

CVE-2023-48380: Improper Neutralization of Special Elements used in an OS Command

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...

CVE-2023-48379: Server-Side Request Forgery (SSRF)

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

CVE-2023-48378: Improper Limitation of a Pathname to a Restricted Directory

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

Softnext Technologies Mail SQR Expert Code Issue Vulnerability

Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies, China. A code issue vulnerability exists in Softnext Technologies Mail SQR Expert prior to v230330, which arises from insufficient filtering of specific URL parameters in...

Softnext Technologies Mail SQR Expert Path Traversal Vulnerability

Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies. A path traversal vulnerability exists in Softnext Technologies Mail SQR Expert prior to v230330, which is a path traversal vulnerability in the parameters of a specific UR...

PT-2023-30805 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to inadequate filtering for a specific URL parameter within a specific function in Softnext Mail SQR Expert, an email management platform. This allows ...