← CVE Intelligence

CVE-2023-48380

Softnext Mail SQR Expert - Command Injection PUBLISHED

Description (CNA)

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

Affected (CNA)

Vendor / productVersions
Softnext / Mail SQR Expert affected through 230330

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.