Approved changes feed: RSS · Atom

cpe:2.3:a:mailtrain:mailtrain:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMailtrain (334ea945-e6a9-5eaf-9701-3d21ce3b0f12)
ProductMailtrain (0180e7de-103f-5d48-803c-a83e517d14e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/mailtrain/mailtrain purl2cpe 2026-06-01 10:15:09.050904
pkg:github/mailtrain-org/mailtrain purl2cpe 2026-06-01 10:15:09.050907
pkg:sourceforge/mailtrain.mirror purl2cpe 2026-06-01 10:15:09.050910

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24617 vulnerable 2026-06-08 05:22:35.091033 Details available
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.
Published: 2021-02-19T22:48:01.000Z
Updated: 2024-08-04T15:19:08.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.