CVE-2019-15072

概要

参考情報

• gist.github.com/chtsecurity/b3396500d4686ad47fb26f64967ef24a · Third Party Advisory
• gist.github.com/tonykuo76/5bf1ac369d953d5276afe0a2d04c2147 · Third Party Advisory
• tvn.twcert.org.tw/taiwanvn/TVN-201909002 · Third Party Advisory
• chtsecurity.com/download/0837ce00c27c73dd3ba3a0d4a7df3a41aaea1ac1e9831a5d61bb64ed484a3598.txt · Third Party Advisory
• openfind.com.tw/taiwan/resource.html · Product
• twcert.org.tw/en/cp-128-3086-ff35d-2.html · Third Party Advisory

mail2000 のその他の脆弱性

• CVE-2024-6741中 5.3Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vuln…
• CVE-2024-6740中 6.1Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within …
• CVE-2024-5400高 8.8Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerabili…
• CVE-2024-5399高 7.2Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vuln…
• CVE-2023-28705中 6.1Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can ex…