ZetacomponentsCVEs & Vulnerabilities
2 CVEs affecting Zetacomponents products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
mail 1mvctools 1
CVE-2023-24108CRITICAL
MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.
22 Feb 2023
9.8
CVSS
CVE-2017-15806HIGHpoc
The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."
15 Nov 2017
8.1
CVSS
← PrevPage 1 / 1Next →