Mail2000 vulnerabilities

2 known vulnerabilities in Mail2000 from Openfind. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Mail2000 V8.0: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5400May 27, 2024Openfind

  Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.

• 7.2 High severity

  Mail2000 V7.0: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5399May 27, 2024Openfind

  Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.