CVE-2020-35743: HGiga MailSherlock - SQL Injection -3

Q: What is CVE-2020-35743?

CVE-2020-35743 is a SQL injection flaw found in HGiga MailSherlock.

Q: How does CVE-2020-35743 impact the affected software?

CVE-2020-35743 allows attackers to inject and launch SQL commands in a URL parameter of specific CGI pages in the affected software.

Q: What is the severity of CVE-2020-35743?

CVE-2020-35743 has a severity rating of 7.6 (high).

Q: Which software versions are affected by CVE-2020-35743?

CVE-2020-35743 affects HGiga Msr45 Isherlock-antispam version up to 4.5-133, HGiga Msr45 Isherlock-user version up to 4.5-120, HGiga Ssr45 Isherlock-antispam version up to 4.5-133, and HGiga Ssr45 Isherlock-user version up to 4.5-120.

Q: How can CVE-2020-35743 be mitigated?

To mitigate CVE-2020-35743, it is recommended to update the affected software to a version that includes a fix for the vulnerability.

Published Dec 31, 2020

Updated

HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.

Affected Software

4 affected components

Hgiga Msr45 Isherlock-antispam<4.5-133

Hgiga Msr45 Isherlock-user<4.5-120

Hgiga Ssr45 Isherlock-antispam<4.5-133

Hgiga Ssr45 Isherlock-user<4.5-120

Remediation

Information

Update MailSherlock MSR45/SSR45 Module to: iSherlock-user-4.5-120.i386.rpm iSherlock-antispam-4.5-133.i386.rpm

Event History

Dec 31, 2020

CVE Published

via MITRE·07:45 AM

Data Sourced

via MITRE·07:45 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-35743?

CVE-2020-35743 is a SQL injection flaw found in HGiga MailSherlock.

How does CVE-2020-35743 impact the affected software?