Read the docs

EasyUse Digital Technology

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

EasyUse Digital Technology records in CISA KEV

No EasyUse Digital Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mailhunter Ultimate 5 records MEDIUM

Records

5 records

TI-2023-17044 CVE-2023-34207 · GHSA-f5qf-87r9-8v7q

Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate

Priority MEDIUM 44

Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Au…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00863 Published 2023-10-17 No fix listed CWE-434
TI-2023-17047 CVE-2023-34210 · GHSA-rwvj-m246-jv4x

SQL Injection in EasyUse MailHunter Ultimate

Priority LOW 39

SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0078 Published 2023-10-17 No fix listed CWE-89
TI-2023-17045 CVE-2023-34208 · GHSA-xq43-hwmx-8g8w

Path Traversal in EasyUse MailHunter Ultimate

Priority LOW 30

Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00854 Published 2023-10-17 No fix listed CWE-22
TI-2023-17046 CVE-2023-34209 · GHSA-mw6g-jfc3-6x9v

Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate

Priority LOW 24

Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unen…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00575 Published 2023-10-17 No fix listed CWE-497
Open these records in search →