Vulnerabilities > Easyuse > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-17 CVE-2023-34209 Unspecified vulnerability in Easyuse Mailhunter Ultimate 2020/2023
Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE parameter.
network
low complexity
easyuse
4.3
2023-10-17 CVE-2023-34208 Path Traversal vulnerability in Easyuse Mailhunter Ultimate 2020/2023
Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive.
network
low complexity
easyuse CWE-22
6.5