Approved changes feed: RSS · Atom
cpe:2.3:a:bvrp_software:slmail:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bvrp Software (66f0c490-38fc-51ce-8d65-1c88dc1ebd37) |
|---|---|
| Product | Slmail (32885e3f-44e6-596b-aa6e-a76d433c8b61) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4595 |
vulnerable | 2026-06-08 06:16:13.525192 |
Insertion of Sensitive Information into Externally-Accessible File or Directory in BVRP Software SLmail
HIGH (7.5)
An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca.
Published: 2023-11-23T12:38:04.999Z
Updated: 2024-08-02T07:31:06.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4594 |
vulnerable | 2026-06-08 06:16:13.524804 |
Cross-site Scripting in BVRP Software SLmail
MEDIUM (6.1)
Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.
Published: 2023-11-23T12:35:23.929Z
Updated: 2024-11-21T19:31:32.046Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4593 |
vulnerable | 2026-06-08 06:16:13.523419 |
Path Traversal in BVRP Software SLmail
MEDIUM (6.5)
Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's intended restrictions and list a parent directory via any filename, such as a multiple ..%2F value affecting the 'dodoc' parameter in the /MailAdmin_dll.htm file.
Published: 2023-11-23T12:31:38.141Z
Updated: 2024-10-01T14:49:56.728Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.