CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2021/02/19 11:15 p.m.•17 views

CVE-2020-24617

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped...

8.8CVSS8.1AI score

SaveExploits0References2

Prion•added 2021/02/19 11:15 p.m.•16 views

Sql injection

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped...

6CVSS9AI score0.01496EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2021/02/19 10:48 p.m.•28 views

CVE-2020-24617

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped...

9.1AI score0.01496EPSS

SaveExploits1References2

CVE•added 2021/02/19 10:48 p.m.•81 views

CVE-2020-24617

Mailtrain 1.24.1 and earlier is affected by CVE-2020-24617 due to a SQL injection in statsClickedSubscribersByColumn (lib/models/campaigns.js) that is exploitable via /campaigns/clicked/ajax because variable column names are not properly escaped. This enables injection through a vulnerable query,...

8.8CVSS9.1AI score0.01496EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by