TI-2021-14858 CVE-2021-36720 · GHSA-6qmc-gxp3-22f6
Cross-site scripting in Cybonet PineApp - Mail Secure
Priority LOW 28
PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
Vulnerabilities
7 records
TI-2013-05620 CVE-2013-6831 · GHSA-xm2w-p5xp-2rc6
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file…
Priority LOW 34
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages a…
TI-2013-05619 CVE-2013-6830 · GHSA-qqmp-2j96-px7v
admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier…
Priority MEDIUM 44
admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslooku…
TI-2013-05618 CVE-2013-6829 · GHSA-j4rq-g26h-6326
admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute…
Priority HIGH 73
admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation.
TI-2013-05617 CVE-2013-6828 · GHSA-rx29-m355-55hm
admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass…
Priority LOW 31
admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng operation via the it parameter.
TI-2013-05616 CVE-2013-6827 · GHSA-fhcv-fhj5-x6px
Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows…
Priority LOW 26
Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter.
TI-2013-04364 CVE-2013-4987 · GHSA-x586-8cqj-6257
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by…
Priority MEDIUM 42
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command.