Approved changes feed: RSS · Atom

cpe:2.3:a:extra_innovation_inc.:acmailer_cgi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExtra Innovation Inc. (d5c6e6b1-3ae5-54e2-ab27-d9ddf916f2ca)
ProductAcmailer Cgi (dda472ba-436c-5afd-ba38-333c525b2764)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49780 vulnerable 2026-06-08 06:16:10.444876 Details available
MEDIUM (6.1)
Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product.
Published: 2025-02-12T07:42:56.826Z
Updated: 2025-02-18T17:39:45.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46686 vulnerable 2026-06-08 05:38:03.709362 Details available
CRITICAL (9.8)
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.
Published: 2025-02-17T23:58:10.727Z
Updated: 2025-02-18T15:41:25.766Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.