Description (CNA)
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HGiga / MailSherlock MSR45/SSR45 | affected iSherlock-user-4.5 before 120; affected iSherlock-antispam-4.5 before 133 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.