Acmailer Db
Monthly
Cross-site scripting in acmailer CGI and acmailer DB (Extra Innovation Inc.) allows remote unauthenticated attackers to inject and execute arbitrary JavaScript in victim browsers when users interact with attacker-crafted content. Both distribution variants - the CGI-based and the database-backed editions - are confirmed affected per CPE data and JPCERT coordination (JVN#47716829). No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Privilege chaining vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Improper access control vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross-site scripting in acmailer CGI and acmailer DB (Extra Innovation Inc.) allows remote unauthenticated attackers to inject and execute arbitrary JavaScript in victim browsers when users interact with attacker-crafted content. Both distribution variants - the CGI-based and the database-backed editions - are confirmed affected per CPE data and JPCERT coordination (JVN#47716829). No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Privilege chaining vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Improper access control vulnerability in acmailer ver. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.