high7.0
CVE-2020-35743
HGiga MailSherlock contains a SQL injection flaw.
Impact
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Msr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Msr45 Isherlock-User | before 4.5-120 |
| Hgiga | Ssr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Ssr45 Isherlock-User | before 4.5-120 |