NetSight
high7.0

CVE-2020-35742

HGiga MailSherlock contains a vulnerability of SQL Injection.

Impact

HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter.

Affected products

VendorProductAffected versions
HgigaMsr45 Isherlock-Antispam
before 4.5-133
HgigaMsr45 Isherlock-User
before 4.5-120
HgigaSsr45 Isherlock-Antispam
before 4.5-133
HgigaSsr45 Isherlock-User
before 4.5-120

Weakness classification

References