CVE-2019-9883

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=group=fullname=testaccount=testemail=acl=Managementlang== without any authorizes...

Cross site request forgery (csrf)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

Cross site request forgery (csrf)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/savelist.php?ACSION=&type=email&category=white&locate=big5&cmd=add&email protected&newmemo=&add=%E6%96%B0%E5%A2%9E without any authorizes...

CVE-2019-9883 Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account.

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

CVE-2019-9882

The CVE-2019-9882 entry details a CSRF vulnerability in MailSherlock MSR35/MSR45. Attackers could add malicious email sources to the whitelist via the endpoint user/save_list.php with parameters such as ACTION, type=email, category=white, and new=email, without requiring authorization. Affected p...