VYPR

ArmorX Spam

by ArmorX Global Technology Corporation

CVEs (3)

  • CVE-2023-48384CriDec 15, 2023
    risk 0.64cvss 9.8epss 0.01

    ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

  • CVE-2026-113403MedOct 20, 2026
    risk 0.42cvss 6.5epss 0.01

    ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.

  • CVE-2026-113402MedOct 20, 2026
    risk 0.42cvss 6.5epss 0.00

    ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.