PT-2015-4939 · Synck Graphica · Synck Graphica Mailform Pro Cgi

Shoji Baba · Publicado 2015-02-27 · Atualizado 2015-02-27 · CVE-2015-0883

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SYNCK GRAPHICA Mailform Pro CGI versions 4.1.4 through 4.1.5

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors when the mailauth module is enabled, due to a problem with sending e-mail messages.

Recommendations For versions 4.1.4 and 4.1.5, consider disabling the mailauth module until a fix is available to prevent exploitation.

Correção

Identificadores relacionados

CVE-2015-0883

Produtos afetados

Synck Graphica Mailform Pro Cgi

Referências · 5

• http://jvn.jp/en/jp/JVN30135729/index.html · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000026 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0883 · Nota de Segurança
• http://synck.com/blogs/news/weblog_1424791052.html · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN30135729/995637/index.html · Nota