Scott Miles

The issue allows remote attackers to bypass authentication in the mail-filter web interface via unspecified vectors.

A directory traversal issue exists in the web interface, allowing remote attackers to read arbitrary files via unspecified vectors.

The issue allows remote attackers to execute arbitrary SQL commands.

The issue is related to a command injection problem, allowing remote attackers to execute arbitrary commands via unknown vectors.

The issue allows remote attackers to hijack the authentication of administrators via unknown vectors due to multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules.