Mailtrain

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mailtrain records in CISA KEV

No Mailtrain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailtrain 1 record MEDIUM

Records

1 record in Mailtrain · all components

TI-2020-15089 CVE-2020-24617 · GHSA-6hrp-g2cw-r29v

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in…

MEDIUM 41

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01496 Published 2021-02-19 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0