Unu Networks: >> Mailgust >> 1.9 Security Vulnerabilities
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password.
CVSS Score
5.0
EPSS Score
0.004
Published
2006-02-28
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page.
CVSS Score
7.5
EPSS Score
0.005
Published
2005-09-27