Search vulnerabilities

Results 2

Export CSV
CVE-2020-10512

HGiga C&Cmail - SQL Injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-10511

HGiga C&Cmail - Broken Access Control

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Products