Skip to content
OpenAdvisories

Vendor

HGiga

44 known vulnerabilities.

44 results · Feed

  • High 8.1

    HGiga MailSherlock - Arbitrary File Download

    The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.

  • Critical 9.8

    HGiga MailSherlock - Broken Authentication

    HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

  • High 8.8

    HGiga C&Cmail - SQL Injection

    HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

  • Critical 9.8

    HGiga C&Cmail - Broken Access Control

    HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.