Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection
Vulnerability Description
A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-1236
Vulnerability Title
Team Johnlong software Raiden MAILD Mail Server 安全漏洞
Vulnerability Description
Team Johnlong software Raiden MAILD Mail Server是中国村荣资讯（Team Johnlong software）公司的一款邮件服务器软件。 Team Johnlong software Raiden MAILD Mail Server v4.7.4之前版本存在安全漏洞，该漏洞源于具有一般用户权限的远程攻击者可以在 邮件服务器网站的表单内容中注入恶意代码，其他用户将表单内容导出为CSV文件可以触发任意代码执行，使攻击者可以在用户端进行任意系统操作或中断服务。
CVSS Information
N/A
Vulnerability Type
N/A