High severity8.8NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026
CVE-2019-9883
CVE-2019-9883
Description
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes.
Affected products
3- Range: iSherlock-base
Patches
Vulnerability mechanics
References
2- surl.twcert.org.tw/mChNinvdExploitThird Party Advisory
- tvn.twcert.org.tw/taiwanvn/TVN-201904003nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.