Vulnerabilidades de HGiga
CVEs publicadas que afetam produtos de HGiga: 5 registro(s), com severidade, exploração e correções.
C&Cm@il package olln-base 3iSherlock-base-4.5 1iSherlock-audit-4.5 1iSherlock-base-5.5 1iSherlock-audit-5.5 1iSherlock 4.5 1iSherlock 5.5 1
CVE-2026-6349
Crítica · 9.8
CWE-78 16/04/2026
HGiga｜iSherlock - OS Command Injection
The
iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-2236
Alta · 7.5
CWE-89 09/02/2026
HGiga｜C&Cm@il - SQL Injection
C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2026-2235
Média · 6.5
CWE-89 09/02/2026
HGiga｜C&Cm@il - SQL Injection
C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2026-2234
Crítica · 9.1
CWE-306 09/02/2026
Vulnerabilidade de Falta de Autenticação no C&Cm@il da HGiga (CWE-306)
O C&Cm@il desenvolvido pela HGiga apresenta uma vulnerabilidade de Falta de Autenticação, permitindo que atacantes remotos não autenticados leiam e modifiquem o conteúdo de e-mails de qualquer usuário.
CVE-2025-11900
Crítica · 9.8
CWE-78 17/10/2025
HGiga｜iSherlock - OS Command Injection
The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.