Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2021-22848

HGiga MailSherlock - SQL Injection-2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HGiga MailSherlock MSR45/SSR45

  • iSherlock-user-4.5 to < 120affected
  • iSherlock-antispam-4.5 to < 133affected

References