high7.0
CVE-2021-22848
HGiga MailSherlock contains a SQL Injection.
Impact
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Msr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Msr45 Isherlock-User | before 4.5-120 |
| Hgiga | Ssr45 Isherlock-Antispam | before 4.5-133 |
| Hgiga | Ssr45 Isherlock-User | before 4.5-120 |