CVE-2018-7706

概要

参考情報

• seclists.org/fulldisclosure/2018/Mar/29 · Exploit
• exploit-db.com/exploits/44285 · Exploit
• sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html · Exploit

securmail のその他の脆弱性

• CVE-2020-13376緊急 9.0SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cook…
• CVE-2018-7707中 6.1Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT…
• CVE-2018-7705高 8.1Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitr…
• CVE-2018-7704中 6.5SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply…
• CVE-2018-7703中 6.1Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT…