Vulnerabilities

TI-2016-01048 CVE-2016-1142 · GHSA-c6mf-3gjv-6g9v

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated…

MEDIUM 44

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.02411 Published 2016-01-16 No fix listed CWE-78

TI-2015-02625 CVE-2015-2971 · GHSA-43qg-hpjm-xmxr

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12…

LOW 28

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01545 Published 2015-07-19 No fix listed CWE-22

TI-2014-03169 CVE-2014-3896 · GHSA-6v74-vfvc-6fcx

Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allow remote attackers to hijack the authentication of arbitrary users for requests…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00924 Published 2014-07-29 No fix listed CWE-352

Vulnerabilities

Filters

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated…

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12…

Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds…