Skip to content
OpenAdvisories

Vendor

Softnext

7 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.5

    Softnext Mail SQR Expert - Local File Inclusion-2

    Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension…

  • Medium 6.5

    Softnext Mail SQR Expert - Local File Inclusion-1

    Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specif…

  • Medium 5.3

    Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

    Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL e…