Vulnerabilities (CVE)

Filtered by vendor Bvrp Software Subscribe
Filtered by product Slwebmail
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0268 1 Bvrp Software 1 Slwebmail 2023-12-10 5.0 MEDIUM N/A
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
CVE-2003-0266 1 Bvrp Software 1 Slwebmail 2023-12-10 7.5 HIGH N/A
Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll.
CVE-2003-0267 1 Bvrp Software 1 Slwebmail 2023-12-10 5.0 MEDIUM N/A
ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file.