Chia-Hao Chang

**Name of the Vulnerable Software and Affected Versions** EasyUse MailHunter Ultimate versions 2023 and earlier **Description** The issue allows remote authenticated users to perform arbitrary system commands with ‘NT AuthoritySYSTEM‘ privilege via a crafted ZIP archive. This is due to an unrestricted upload of file with dangerous type vulnerability in the create template function. **Recommendations** For EasyUse MailHunter Ultimate versions 2023 and earlier, consider disabling the create template function until a patch is available to prevent the upload of malicious files. Restrict access to the system to minimize the risk of exploitation. Avoid using the create template function with crafted ZIP archives until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EasyUse MailHunter Ultimate versions 2023 and earlier **Description** The issue allows remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive. This is due to a path traversal vulnerability in the create template function. **Recommendations** For EasyUse MailHunter Ultimate versions 2023 and earlier, consider restricting access to the create template function until a patch is available. As a temporary workaround, avoid using the create template function with crafted ZIP archives to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EasyUse MailHunter Ultimate versions 2023 and earlier **Description** The issue allows remote authenticated users to execute arbitrary SQL commands via the `ctl00$ContentPlaceHolder1$txtCustSQL` parameter in the create customer group function. This enables attackers to manipulate the database, potentially leading to data breaches or other malicious activities. **Recommendations** For EasyUse MailHunter Ultimate versions 2023 and earlier, consider restricting access to the create customer group function until a patch is available. As a temporary workaround, avoid using the `ctl00$ContentPlaceHolder1$txtCustSQL` parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.