Hgiga Oaklouds Mailsherlock
5 CVEs affecting Hgiga Oaklouds Mailsherlock. Latest disclosed: 2023-03-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24841 | High | 7.2 | 2023-03-27 | HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An authenticated remote attacker with admini… |
CVE-2023-24840 | High | 7.2 | 2023-03-27 | HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated remote attacker with administrator privile… |
CVE-2023-24839 | Medium | 6.1 | 2023-03-27 | HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject J… |
CVE-2023-24842 | Medium | 5.3 | 2023-03-27 | HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of… |
CVE-2018-17542 | Medium | 4.3 | 2019-02-11 | SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the… |