Skip to content
OpenAdvisories
High · 7.0 CVE-2020-35743 EUVD-2020-23399GHSA-p6jx-ww27-x6x5

HGiga MailSherlock - SQL Injection -3

Published Dec 31, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Vendor: HGiga Product: MailSherlock MSR45/SSR45

Description

HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.

Affected products

VendorProductAffectedFixed
HGiga MailSherlock MSR45/SSR45 unspecified – < 120, unspecified – < 133 120

References