Skip to content
OpenAdvisories

Vendor

Phpmassmail

1 known vulnerabilities.

Products

EverSync 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2018-25164

    EverSync 0.5 Arbitrary File Download via files Directory

    EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory. Attackers can send GET requests to the files directory to download database fi…

    Phpmassmail EverSync