hastymail kayıtları
hastymail üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %14,3
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-16 Configuration1
- CWE-20 Improper Input Validation1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2011-4542Silahlaştırılmış | Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafhastymail · hastymail2 · CWE-89 | Yüksek7,5 | — | %23,5 | 30 Kas 2011 |
27İzleyin | CVE-2006-5262Kavram kanıtı | CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbithastymail · hastymail | Orta6,5 | — | %2,5 | 12 Eki 2006 |
26İzleyin | CVE-2006-5313İstismar yok | Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLhastymail · hastymail · CWE-20 | Orta6,5 | — | %1,3 | 17 Eki 2006 |
20İzleyin | CVE-2009-5051İstismar yok | Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers thastymail · hastymail2 · CWE-16 | Orta5,0 | — | %1,0 | 18 Oca 2011 |
18İzleyin | CVE-2004-2704İstismar yok | Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition fhastymail · hastymail · CWE-79 | Orta4,3 | — | %4,7 | 31 Ara 2004 |
17İzleyin | CVE-2011-4541Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script hastymail · hastymail2 · CWE-79 | Orta4,3 | — | %1,4 | 28 Kas 2011 |
17İzleyin | CVE-2010-4646İstismar yok | Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafhastymail · hastymail2 · CWE-79 | Orta4,3 | — | %1,0 | 18 Oca 2011 |
- CVE-2011-454240Planlayın
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Draf
YüksekCVSS 7,5SilahlaştırılmışEPSS %23hastymail · hastymail230 Kas 2011
- CVE-2006-526227İzleyin
CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbit
OrtaCVSS 6,5Kavram kanıtıEPSS %2hastymail · hastymail12 Eki 2006
- CVE-2006-531326İzleyin
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRL
OrtaCVSS 6,5İstismar yokEPSS %1hastymail · hastymail17 Eki 2006
- CVE-2009-505120İzleyin
Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers t
OrtaCVSS 5,0İstismar yokEPSS %1hastymail · hastymail218 Oca 2011
- CVE-2004-270418İzleyin
Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition f
OrtaCVSS 4,3İstismar yokEPSS %4hastymail · hastymail31 Ara 2004
- CVE-2011-454117İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1hastymail · hastymail228 Kas 2011
- CVE-2010-464617İzleyin
Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a craf
OrtaCVSS 4,3İstismar yokEPSS %1hastymail · hastymail218 Oca 2011