Vulnerabilities
7 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-24131 | SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php. SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — | |
| CVE-2023-38193 | An issue was discovered in SuperWebMailer 9.00.0.01710. An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line. NVD description · AI analysis pending | 8.8 group max | 1% | PoC |
| — | |
| CVE-2023-38191 | An issue was discovered in SuperWebMailer 9.00.0.01710. An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — | |
| CVE-2020-11546 | SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection. NVD description · AI analysis pending | 9.8 | 33% | PoC |
| — |