Vulnerabilities (CVE)

Filtered by vendor Hgiga Subscribe
Filtered by product Oaklouds Ccm\@il
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10512 1 Hgiga 1 Oaklouds Ccm\@il 2024-02-28 9.0 HIGH 8.8 HIGH
HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.
CVE-2020-10511 1 Hgiga 1 Oaklouds Ccm\@il 2024-02-28 10.0 HIGH 9.8 CRITICAL
HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.