CVE-2018-7704

Description

References

• seclists.org/fulldisclosure/2018/Mar/29 · Exploit
• exploit-db.com/exploits/44285 · Exploit
• sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html · Exploit

securmail의 다른 취약점

• CVE-2020-13376심각 9.0SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cook…
• CVE-2018-7707보통 6.1Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT…
• CVE-2018-7706보통 6.5Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages…
• CVE-2018-7705높음 8.1Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitr…
• CVE-2018-7703보통 6.1Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT…