Approved changes feed: RSS · Atom

cpe:2.3:a:hgiga:ssr45_isherlock-user:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHgiga (3395f64f-c7c9-5c57-a478-cf9fa807fa6c)
ProductSsr45 Isherlock User (e2cd711e-6131-532d-907f-56a35b609f73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22848 vulnerable 2026-06-08 05:30:01.638434 HGiga MailSherlock - SQL Injection-2
HIGH (7)
HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.
Published: 2021-03-18T04:35:21.791Z
Updated: 2024-09-16T20:57:24.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35851 vulnerable 2026-06-08 05:25:02.243680 HGiga MailSherlock - Command Injection
HIGH (8.1)
HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.
Published: 2020-12-31T07:45:52.468Z
Updated: 2024-09-17T04:25:22.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35743 vulnerable 2026-06-08 05:25:01.645054 HGiga MailSherlock - SQL Injection -3
HIGH (7)
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.
Published: 2020-12-31T07:45:51.808Z
Updated: 2024-09-17T02:37:09.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35742 vulnerable 2026-06-08 05:25:01.644621 HGiga MailSherlock - SQL Injection -1
HIGH (7)
HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter.
Published: 2020-12-31T07:45:51.201Z
Updated: 2024-09-16T18:03:00.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35741 vulnerable 2026-06-08 05:25:01.644158 HGiga MailSherlock - XSS -2
HIGH (7)
HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.
Published: 2020-12-31T07:45:50.593Z
Updated: 2024-09-16T22:55:57.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35740 vulnerable 2026-06-08 05:25:01.643483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25850 vulnerable 2026-06-08 05:23:49.568329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25848 vulnerable 2026-06-08 05:23:49.557158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.