Approved changes feed: RSS · Atom

cpe:2.3:a:cybonet:pineapp_mail_secure:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorCybonet (e4532564-3587-507e-bb70-987a6af0b636)
ProductPineapp Mail Secure (df56b37c-9cfd-5f9d-8c72-570f82093c3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22794 vulnerable 2026-06-08 05:40:55.368727 Cybonet - PineApp Mail Relay Unauthenticated Sql Injection
MEDIUM (6.8)
Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /manage/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 and by doing that, the attacker can run Remote Code Execution in one liner.
Published: 2022-02-24T16:14:15.767Z
Updated: 2024-09-17T03:44:00.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22793 vulnerable 2026-06-08 05:40:55.368284 Cybonet - PineApp Mail Relay Local File Inclusion
MEDIUM (6.1)
Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server.
Published: 2022-02-24T16:14:16.769Z
Updated: 2024-09-16T16:52:49.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.