Vulnerabilities > Winmail Project

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-26	CVE-2020-23776	Server-Side Request Forgery (SSRF) vulnerability in Winmail Project Winmail 6.5 A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. network low complexity winmail-project CWE-918	5.0
2021-01-26	CVE-2020-23774	Cross-site Scripting vulnerability in Winmail Project Winmail 6.5 A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed. network winmail-project CWE-79	4.3

Vulnerabilities > Winmail Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Winmail Project"}]}