Postfix Admin Project Postfix Admin vulnerabilities

2 known vulnerabilities affecting postfix_admin_project/postfix_admin.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2012-0812MEDIUMCVSS 6.1v2.3.42019-11-22

CVE-2012-0812 [MEDIUM] CWE-79 CVE-2012-0812: PostfixAdmin 2.3.4 has multiple XSS vulnerabilities PostfixAdmin 2.3.4 has multiple XSS vulnerabilities

CVE-2014-2655MEDIUMCVSS 6.5≤ 2.3.6v2.2.1.1+6 more2014-04-02

CVE-2014-2655 [MEDIUM] CWE-89 CVE-2014-2655: SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (a SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.