CVE-2019-9883

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
OAKlouds	MailSherlock MSR35	>= iSherlock-base, < 1.5-328; >= iSherlock-useradmin, < 1.5-239; >= iSherlock-sysinfo, < 1.5-196; >= iSherlock-user, < 1.5-127
OAKlouds	MailSherlock MSR45	>= iSherlock-base, < 4.5-206; >= iSherlock-useradmin, < 4.5-106; >= iSherlock-sysinfo, < 4.5-109; >= iSherlock-user, < 4.5-81

References

http://surl.twcert.org.tw/mChNiExploit, Third Party Advisory
https://tvn.twcert.org.tw/taiwanvn/TVN-201904003Exploit, Third Party Advisory
http://surl.twcert.org.tw/mChNiExploit, Third Party Advisory
https://tvn.twcert.org.tw/taiwanvn/TVN-201904003Exploit, Third Party Advisory

Timeline

Published: Jun 3, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-98849.8eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access ma CVE-2019-98859.8eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.CVE-2019-98867.5Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eC CVE-2019-98892.7In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call usi CVE-2019-98909.1An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.CVE-2019-98919.8The function getopt_simple as described in Advanced Bash Scripting Guide (ISBN 978-1435752184) allows privilege escalation and execution of CVE-2019-98926.5An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who CVE-2019-98939.8libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), whic CVE-2019-98947.5A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.CVE-2019-98959.8In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.CVE-2019-98967.8In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same director CVE-2019-98977.5Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.