hivemail records

6 published records for vendor hivemail.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2006-0757Proof of concept	Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contacthivemail · hivemail pre-auth RCE	High7.5	—	3.2%	Feb 17, 2006
31Monitor	CVE-2006-0759Proof of concept	Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the conthivemail · hivemail pre-auth RCE SQL injection	High7.5	—	1.8%	Feb 17, 2006
30Monitor	CVE-2006-3565No exploit	SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via hivemail · hivemail pre-auth RCE SQL injection	High7.5	—	1.3%	Jul 12, 2006
20Monitor	CVE-2006-3566No exploit	search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to hivemail · hivemail Pre-auth	Medium5.0	—	1.3%	Jul 12, 2006
18Monitor	CVE-2006-0758Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTMhivemail · hivemail Pre-auth XSS	Medium4.3	—	1.9%	Feb 17, 2006
18Monitor	CVE-2006-3564No exploit	Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTMhivemail · hivemail Pre-auth XSS	Medium4.3	—	1.7%	Jul 12, 2006

CVE-2006-0757
31Monitor
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contact
HighCVSS 7.5Proof of conceptEPSS 3%
- pre-auth RCE
hivemail · hivemailFeb 17, 2006
CVE-2006-0759
31Monitor
Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cont
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
hivemail · hivemailFeb 17, 2006
CVE-2006-3565
30Monitor
SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
hivemail · hivemailJul 12, 2006
CVE-2006-3566
20Monitor
search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
hivemail · hivemailJul 12, 2006
CVE-2006-0758
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTM
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
hivemail · hivemailFeb 17, 2006
CVE-2006-3564
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTM
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
hivemail · hivemailJul 12, 2006