Approved changes feed: RSS · Atom

cpe:2.3:a:cybonet:pineapp_mail_relay:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCybonet (e4532564-3587-507e-bb70-987a6af0b636)
ProductPineapp Mail Relay (c4205707-014c-5322-a3e8-fa84afa73de4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41695 vulnerable 2026-06-08 06:43:54.873083 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
HIGH (7.5)
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Published: 2024-07-30T09:02:21.051Z
Updated: 2024-08-02T04:46:52.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41694 vulnerable 2026-06-08 06:43:54.872520 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
MEDIUM (5.3)
Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Published: 2024-07-30T09:01:27.183Z
Updated: 2024-08-02T04:46:52.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22794 vulnerable 2026-06-08 05:40:55.368687 Cybonet - PineApp Mail Relay Unauthenticated Sql Injection
MEDIUM (6.8)
Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /manage/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 and by doing that, the attacker can run Remote Code Execution in one liner.
Published: 2022-02-24T16:14:15.767Z
Updated: 2024-09-17T03:44:00.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22793 vulnerable 2026-06-08 05:40:55.367429 Cybonet - PineApp Mail Relay Local File Inclusion
MEDIUM (6.1)
Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server.
Published: 2022-02-24T16:14:16.769Z
Updated: 2024-09-16T16:52:49.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.