Unrated severityNVD Advisory· Published Feb 24, 2022· Updated Sep 17, 2024

Cybonet - PineApp Mail Relay Unauthenticated Sql Injection

CVE-2022-22794

Description

Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /manage/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 /admin/emailrichment/usersunlist.php?CUSTOMER_ID_INNER=1 and by doing that, the attacker can run Remote Code Execution in one liner.

Affected products

Cybonet/PineApp Mail Relayllm-create
Cybonet/Pineapp Mail Relayv5
Range: PineApp Latest

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.gov.il/en/departments/faq/cve_advisoriesmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000