MailHunter Ultimate vulnerabilities

2 known vulnerabilities in MailHunter Ultimate from EasyUse Digital Technology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  MailHunter Ultimate: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-34210Oct 17, 2023EasyUse Digital Technology

  SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter.

• 8.8 High severity

  MailHunter Ultimate: Unrestricted Upload of File with Dangerous Type

  CVE-2023-34207Oct 17, 2023EasyUse Digital Technology

  Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Authority\SYSTEM‘ privilege via a crafted