Postfixadmin
Source repositories
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-5930 | Low | 0.22 | 2.7 | 0.15 | Mar 20, 2017 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check. | ||
| CVE-2012-0812 | 0.00 | — | 0.01 | Nov 22, 2019 | PostfixAdmin 2.3.4 has multiple XSS vulnerabilities | |||
| CVE-2012-0811 | 0.00 | — | 0.02 | Oct 1, 2014 | Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used… | |||
| CVE-2014-2655 | 0.00 | — | 0.02 | Apr 2, 2014 | SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias. |
- risk 0.22cvss 2.7epss 0.15
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
- CVE-2012-0812Nov 22, 2019risk 0.00cvss —epss 0.01
PostfixAdmin 2.3.4 has multiple XSS vulnerabilities
- CVE-2012-0811Oct 1, 2014risk 0.00cvss —epss 0.02
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used…
- CVE-2014-2655Apr 2, 2014risk 0.00cvss —epss 0.02
SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.