← CVE Intelligence

CVE-2022-22794

Cybonet - PineApp Mail Relay Unauthenticated Sql Injection PUBLISHED

Description (CNA)

Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /manage/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 and by doing that, the attacker can run Remote Code Execution in one liner.

Affected (CNA)

Vendor / productVersions
Cybonet / Pineapp Mail Relayaffected PineApp Latest

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.