Vendor
Postfixadmin Project
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2012-0812 | Med | 0.40 | 6.1 | 0.01 | Nov 22, 2019 | PostfixAdmin 2.3.4 has multiple XSS vulnerabilities | ||
| CVE-2017-5930 | Low | 0.22 | 2.7 | 0.15 | Mar 20, 2017 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check. | ||
| CVE-2012-0811 | 0.00 | — | 0.02 | Oct 1, 2014 | Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used… | |||
| CVE-2014-2655 | 0.00 | — | 0.02 | Apr 2, 2014 | SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias. |
- risk 0.40cvss 6.1epss 0.01
PostfixAdmin 2.3.4 has multiple XSS vulnerabilities
- risk 0.22cvss 2.7epss 0.15
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
- CVE-2012-0811Oct 1, 2014risk 0.00cvss —epss 0.02
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used…
- CVE-2014-2655Apr 2, 2014risk 0.00cvss —epss 0.02
SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.