Vendor
HGiga
44 known vulnerabilities.
Products
44 results · Feed
-
High 8.1
HGiga MailSherlock - Arbitrary File Download
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.
-
Critical 9.8
HGiga MailSherlock - Broken Authentication
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
-
High 8.8
HGiga C&Cmail - SQL Injection
HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.
-
Critical 9.8
HGiga C&Cmail - Broken Access Control
HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.