Approved changes feed: RSS · Atom

cpe:2.3:a:easyuse_digital_technology:mailhunter_ultimate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEasyuse Digital Technology (16529e42-8ddc-53ab-a900-e8f7f0a3cecb)
ProductMailhunter Ultimate (c667e4eb-0865-570e-bb8f-a28b0a8812d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34210 vulnerable 2026-06-08 06:06:24.885259 SQL Injection in EasyUse MailHunter Ultimate
HIGH (7.7)
SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter.
Published: 2023-10-17T04:00:49.629Z
Updated: 2024-09-13T18:05:21.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34209 vulnerable 2026-06-08 06:06:24.884759 Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate
MEDIUM (5)
Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE parameter.
Published: 2023-10-17T04:00:28.128Z
Updated: 2024-09-13T18:05:39.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34208 vulnerable 2026-06-08 06:06:24.884360 Path Traversal in EasyUse MailHunter Ultimate
MEDIUM (6.5)
Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive.
Published: 2023-10-17T04:00:05.711Z
Updated: 2024-09-13T18:05:58.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34207 vulnerable 2026-06-08 06:06:24.883067 Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate
CRITICAL (9.9)
Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Authority\SYSTEM‘ privilege via a crafted ZIP archive.
Published: 2023-10-17T03:35:35.535Z
Updated: 2024-09-13T19:52:42.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.