Pineapp - vulnerabilities (CVEs)

7 CVEs in 3 products, 0 in the last 30 days, newest from 2021-12-08.

Products

CVE-2021-36720 - CVSS 6.1 (medium), 2021-12-08: PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
CVE-2013-6829 - CVSS 7.5 (high), 2013-11-20: admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter…
CVE-2013-6828 - CVSS 6.4 (medium), 2013-11-20: admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng operation via the it parameter.
CVE-2013-6831 - CVSS 7.2 (high), 2013-11-20: PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows…
CVE-2013-6827 - CVSS 5 (medium), 2013-11-20: Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the…
CVE-2013-6830 - CVSS 7.5 (high), 2013-11-20: admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via…
CVE-2013-4987 - CVSS 8.5 (high), 2013-11-08: PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a…