Mail Sqr Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:softnext:mail_sqr_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Softnext (80b74ea5-021d-5b62-98b1-ccac434c4b47) |
|---|---|
| Product | Mail Sqr Expert (9874a0c1-020b-52e4-9d40-23dce1aedf81) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5670 |
vulnerable | 2026-06-08 06:56:16.986791 |
Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection
CRITICAL (9.8)
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.
Published: 2024-07-29T02:23:20.658Z
Updated: 2024-08-01T21:18:06.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48382 |
vulnerable | 2026-06-08 06:14:27.125660 |
Softnext Mail SQR Expert - Local File Inclusion-2
MEDIUM (6.5)
Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
Published: 2023-12-15T08:24:59.011Z
Updated: 2024-08-02T21:30:35.087Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48381 |
vulnerable | 2026-06-08 06:14:27.125415 |
Softnext Mail SQR Expert - Local File Inclusion-1
MEDIUM (6.5)
Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
Published: 2023-12-15T08:19:57.794Z
Updated: 2024-08-02T21:30:34.536Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48380 |
vulnerable | 2026-06-08 06:14:27.125146 |
Softnext Mail SQR Expert - Command Injection
HIGH (7.4)
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Published: 2023-12-15T08:12:44.486Z
Updated: 2025-05-21T14:26:40.553Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48379 |
vulnerable | 2026-06-08 06:14:27.124627 |
Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)
MEDIUM (5.3)
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
Published: 2023-12-15T08:05:29.108Z
Updated: 2024-08-02T21:30:34.462Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48378 |
vulnerable | 2026-06-08 06:14:27.124274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.