Skip to content
OpenAdvisories
High · 7.0 CVE-2020-35742 EUVD-2020-23398GHSA-xfr6-j4fr-qr42

HGiga MailSherlock - SQL Injection -1

Published Dec 31, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter.

Affected products

VendorProductAffectedFixed
HGiga MailSherlock MSR45/SSR45 unspecified – < 120, unspecified – < 133 120

References