Filemail pricing software#

Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 738.

Attack attempts may be identified with Snort ID 858. It may be suggested to replace the affected object with an alternative product. There is no information about possible countermeasures known. The MITRE ATT&CK project declares the attack technique as T1068. There are neither technical details nor an exploit publicly available. No form of authentication is required for exploitation. This vulnerability is handled as CVE-1999-1154. The weakness was disclosed as not defined posting (Bugtraq). LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. Impacted is confidentiality, integrity, and availability.

Filemail pricing software#

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Using CWE to declare the problem leads to CWE-269. The manipulation as part of a Metacharacter leads to a privilege escalation vulnerability. Affected by this issue is an unknown function of the component Email Address Handler. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability was found in Lakeweb Filemail CGI Script ( affected version not known) and classified as critical. The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.