Cybonet PineApp Mail Secure SQL注入漏洞

Cybonet PineApp Mail Secure is Cybonet Israel's solution for blocking most malicious email threats at the network perimeter, while providing a range of additional options for comprehensive security and messaging control.Cybonet PineApp Mail Relay is vulnerable to a SQL injection vulnerability tha...

CVE-2022-22794

Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMERIDINNER=1 /admin/emailrichment/userlist.php?CUSTOMERIDINNER=1 /manage/emailrichment/usersunlist.php?CUSTOMERIDINNER=1...

CVE-2022-22793

Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/emlviewer/email.content.body.php?filesystempath=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...

CVE-2021-36719

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies...

CVE-2021-36719

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36719

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...

Code injection

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

Design/Logic Flaw

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...

CVE-2021-36719

CVE-2021-36719 refers to PineApp - Mail Secure. The root cause is a vulnerability in the vulnerable nicUpload.php file that allows an authenticated user to upload a malicious file, leading to remote code execution and server takeover. Affected product: PineApp - Mail Secure (user-authenticated co...

CVE-2021-36719 Cybonet - PineApp

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720 Cybonet - PineApp

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...

CVE-2021-36720

PineApp - Mail Secure contains a cross-site scripting (XSS) vulnerability in the /blocking.php?url= parameter that allows injection of arbitrary script code (e.g., ). This can lead to cookie theft and related session information exposure as described in multiple sources. The vulnerability is tied...

PT-2021-21324

Name of the Vulnerable Software and Affected Versions PineApp Mail Secure affected versions not specified Description The issue allows an attacker to send a request to the "/blocking.php" API endpoint with a malicious URL parameter, potentially leading to cookie theft. The attacker can exploit th...

PT-2021-21323

Name of the Vulnerable Software and Affected Versions PineApp Mail Secure affected versions not specified Description The issue allows an attacker to upload a malicious file by exploiting the vulnerable nicUpload.php file, which can lead to taking over the server and running remote code. The...

CVE-2021-36719: Unrestricted Upload of File with Dangerous Type

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720: Improper Neutralization of Input During Web Page Generation

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies...

Cybonet PineApp Mail Secure 跨站脚本漏洞

Cybonet PineApp Mail Secure from Cybonet Israel blocks most malicious email threats at the network perimeter while providing a range of additional options for comprehensive security and message control. Cybonet PineApp Mail Secure suffers from a cross-site scripting vulnerability that originates ...