Description
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Softnext | Mail SQR Expert | – ≤ 230330 | — |