Vulnerability in Synck Graphica Mailform Pro Cgi

CVE-2015-0883

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.

EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.

Affected products

Synck_graphica Mailform_pro_cgi — versions 4.1.4, 4.1.5
N/a — versions n/a

References

vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM)
vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)