Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Smartertools SmarterTools SmarterMail 命令注入漏洞
Vulnerability Description
Smartertools SmarterTools SmarterMail是美国SmarterTools（Smartertools）公司的一套邮件服务器软件。该软件支持垃圾邮件过滤、数据统计、简单邮件传输协议SMTP验证等功能。 SmarterTools SmarterMail存在安全漏洞，该漏洞源于中间干预者攻击者可利用该漏洞可以在POP3 STLS命令之后输入命令，将明文命令注入加密的用户会话中。
CVSS Information
N/A
Vulnerability Type
N/A