Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: EasyUse Digital Technology Clear all filters
TI-2023-17047 CVE-2023-34210 · GHSA-rwvj-m246-jv4x

SQL Injection in EasyUse MailHunter Ultimate

Priority LOW 39

SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0078 Published 2023-10-17 No fix listed CWE-89
TI-2023-17046 CVE-2023-34209 · GHSA-mw6g-jfc3-6x9v

Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate

Priority LOW 24

Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unen…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00575 Published 2023-10-17 No fix listed CWE-497
TI-2023-17045 CVE-2023-34208 · GHSA-xq43-hwmx-8g8w

Path Traversal in EasyUse MailHunter Ultimate

Priority LOW 30

Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00854 Published 2023-10-17 No fix listed CWE-22
TI-2023-17044 CVE-2023-34207 · GHSA-f5qf-87r9-8v7q

Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate

Priority MEDIUM 44

Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Au…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00863 Published 2023-10-17 No fix listed CWE-434