Skip to content
OpenAdvisories
High · 8.8 CVE-2020-10512 EUVD-2020-2965GHSA-23m4-7vqv-gc3v

HGiga C&Cmail - SQL Injection

Published Apr 15, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

Affected products

VendorProductAffectedFixed
HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm, CCMAILN before olln-calendar-5.0-100.i386.rpm —

References