Pineapp

6 CVEs across 3 Pineapp products. Browse Pineapp vulnerabilities, severities, and proof-of-concept exploits.

Pineapp products with known CVEs

ProductCVEs
Mail-Secure4
Mail-Secure 5099sk2
Mail Secure1
Pineapp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-36720Medium6.12021-12-08PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
CVE-2013-68312013-11-20PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local…
CVE-2013-68302013-11-20admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via she…
CVE-2013-68292013-11-20admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter durin…
CVE-2013-68282013-11-20admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng operation via the it parameter.
CVE-2013-68272013-11-20Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the ms…
CVE-2013-49872013-11-08PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "syst…