CVEvulnerability

CVE-2015-0883

6.8 MEDIUM Published 2015-02-27 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-02-27
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

• synck graphica mailform pro cgi 4.1.4 • synck graphica mailform pro cgi 4.1.5

References

http://jvn.jp/en/jp/JVN30135729/995637/index.html jvn.jp
http://jvn.jp/en/jp/JVN30135729/index.html Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000026 Vendor Advisory
http://www.synck.com/blogs/news/weblog_1424791052.html Vendor Advisory
http://jvn.jp/en/jp/JVN30135729/995637/index.html jvn.jp
http://jvn.jp/en/jp/JVN30135729/index.html Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000026 Vendor Advisory
http://www.synck.com/blogs/news/weblog_1424791052.html Vendor Advisory