Skip to content
OpenAdvisories

Vendor

HGiga

44 known vulnerabilities.

Products

iSherlock 4.5 9 iSherlock 5.5 9 MailSherlock MSR45/SSR45 8 MailSherlock 4 OAKlouds 4 C&Cm@il package olln-base 3 PowerStation 3 OAKlouds OAKSv2 2 OAKlouds OAKSv3 2 C&Cmail 2 OAKlouds-bulletin_v3-2.0 1 OAKlouds-bulletin_v3-3.0 1 OAKSv20 OAKlouds-document_v3 1 OAKSv30 OAKlouds-document_v3 1 OAKlouds-custom_page-2.0 1 OAKlouds-custom_page-3.0 1 OAKlouds-custom_page-4.0 1 iSherlock-maillog-4.5 1 iSherlock-smtp-4.5 1 iSherlock-maillog-5.5 1 iSherlock-smtp-5.5 1 iSherlock-base-4.5 1 iSherlock-audit-4.5 1 iSherlock-base-5.5 1 iSherlock-audit-5.5 1 HGiga OAKlouds 1 OAKSv20 OAKlouds-mol_course_v3 2.0 1 OAKSv30 OAKlouds-mol_course_v3 3.0 1 OAKSv20 OAKlouds-document_v3 2.0 1 OAKSv30 OAKlouds-document_v3 3.0 1 C&Cm@il 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-2235

    HGiga｜C&Cm@il - SQL Injection

    C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

    HGiga C&Cm@il package olln-base
  • Medium 6.7
    CVE-2025-3364

    HGiga PowerStation - Chroot Escape

    The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system.

    HGiga PowerStation
  • Medium 5.4
    CVE-2025-2150

    HGiga C&Cm@il - Stored Cross-Site Scripting

    The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.

    HGiga C&Cm@il
  • Medium 4.9
    CVE-2024-4297

    HGiga iSherlock - Arbitrary File Download

    The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerabili…

    HGiga iSherlock 5.5 iSherlock 4.5
  • Medium 4.9
    CVE-2024-4296

    HGiga iSherlock - Arbitrary File Download

    The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability…

    HGiga iSherlock 5.5 iSherlock 4.5
  • Medium 5.3
    CVE-2023-24842

    HGiga MailSherlock - Broken Access Control

    HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL.

    HGiga MailSherlock
  • Medium 6.1
    CVE-2023-24839

    HGiga MailSherlock - Reflected XSS

    HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.

    HGiga MailSherlock
  • Medium 5.3
    CVE-2021-22850

    HGiga OAKloud Portal - Security Misconfiguration

    HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.

    HGiga OAKSv20 OAKlouds-document_v3 OAKSv30 OAKlouds-document_v3