Vulnerabilities (CVE)

Filtered by vendor Mailmarshal Subscribe
Filtered by product Mailmarshal Smtp
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3796 1 Mailmarshal 1 Mailmarshal Smtp 2024-02-14 7.6 HIGH N/A
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.