Maarch

8 CVEs across 4 Maarch products. Browse Maarch vulnerabilities, severities, and proof-of-concept exploits.

Maarch products with known CVEs

ProductCVEs
Maarch Rm5
Letterbox2
Gec\/ged1
Maarch1
Maarch CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-37772High7.52022-11-23Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unau…
CVE-2022-37774Medium5.32022-11-23There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview i…
CVE-2022-37773Medium6.52022-11-23An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disc…
CVE-2019-15855Critical9.12020-01-17An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted…
CVE-2019-15854High8.82020-01-17An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highe…
CVE-2015-15872015-02-19Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute…
CVE-2014-89952014-11-20SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie.
CVE-2006-54922006-10-25Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via uns…