CVE-2006-0757

Опубликовано: 18 фев. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in folders.update.php, and possibly certain parameters in (4) calendar.event.php, (5) index.php, (6) pop.download.php, (7) read.bounce.php, (8) rules.block.php, (9) language.php, and (10) certain other scripts, as demonstrated by an addressbook.update.php request with a contactgroupid value of phpinfo() preceded by facilitators.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hivemail:hivemail:1.1:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.2.1_beta1:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.2.1_rc:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.2_sp1:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.3_beta1:*:*:*:*:*:*:*

cpe:2.3:a:hivemail:hivemail:1.3_rc1:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.0788

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fpc4-qh4g-668v

github

почти 4 года назад