Vulnerabilities (CVE)

Filtered by vendor Pineapp Subscribe
Filtered by product Mail-secure 5099sk
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-6830 1 Pineapp 1 Mail-secure 5099sk 2023-12-10 7.5 HIGH N/A
admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation.
CVE-2013-6831 1 Pineapp 1 Mail-secure 5099sk 2023-12-10 7.2 HIGH N/A
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account.