CVE-2011-4554 One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-...
MediumCVSS 5.5
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oneclickorgs one click orgs | <= 1.2.2 | No fix listed |
| oneclickorgs one click orgs | = 1.0.0 | No fix listed |
| oneclickorgs one click orgs | = 1.0.1 | No fix listed |
| oneclickorgs one click orgs | = 1.1.0 | No fix listed |
| oneclickorgs one click orgs | = 1.1.1 | No fix listed |
| oneclickorgs one click orgs | = 1.2.0 | No fix listed |
| oneclickorgs one click orgs | = 1.2.1 | No fix listed |