Design/Logic Flaw

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection...

Design/Logic Flaw

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter...

Cross site scripting

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the Blacklist endpoint...

Cross site scripting

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the rulleslistajax endpoint...

Cross site scripting

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the dataleaklistajax endpoint...

Design/Logic Flaw

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter...

CVE-2022-37238

CVE-2022-37238 affects MDaemon Technologies SecurityGateway for Email Servers 8.5.2. The vulnerability is a Cross Site Scripting (XSS) flaw triggered via the currentRequest parameter . Root cause described in the sources is a reflected XSS condition in the parameter handling, with a CVSSv3.1 base...

CVE-2022-37238

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the currentRequest parameter...

CVE-2022-37239

CVE-2022-37239 affects MDaemon Technologies SecurityGateway for Email Servers version 8.5.2. The vulnerability is a Cross Site Scripting (XSS) issue exposed via the rulles_list_ajax endpoint. Public details in connected documents consistently describe XSS via that API path and reference the 8.5.2...

CVE-2022-37239

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the rulleslistajax endpoint...

CVE-2022-37240

The CVE-2022-37240 entry concerns MDaemon Technologies SecurityGateway for Email Servers (v8.5.2) and describes an HTTP Response Splitting flaw exploitable via the format parameter. Multiple connected sources corroborate the issue and specify the affected product/version, the vulnerable component...

CVE-2022-37240

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter...

CVE-2022-37241

CVE-2022-37241 affects MDaemon Technologies SecurityGateway for Email Servers (version 8.5.2). The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the data_leak_list_ajax endpoint. Documentation across sources consistently notes an XSS issue originating from this endpoint, with...

CVE-2022-37242

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter...

CVE-2022-37242

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to an HTTP Response Splitting issue that is triggered via the data parameter. The PT Security entry specifies the affected software version (8.5.2) and notes that the issue arises from HTTP response splitting related to th...

CVE-2022-37243

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the whitelist endpoint...

CVE-2022-37243

CVE-2022-37243 affects MDaemon Technologies SecurityGateway for Email Servers 8.5.2. The issue is a Cross Site Scripting (XSS) vulnerability exploitable via the whitelist endpoint. Root cause details are not specified beyond the XSS via that endpoint. No exploit specifics or in-the-wild usage are...

CVE-2022-37244

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection...

CVE-2022-37244

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is affected by a vulnerability described as IFRAME Injection via the currentRequest parameter. The issue occurs after login and can lead to injection of malicious tags. A concrete description across connected sources specifies the vulne...

CVE-2022-37245

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint. The issue, confirmed by PT-2022-23889, indicates an XSS in the Blacklist endpoint that could allow injection of scripts into the page, potentially enabling data the...