Summary
Mailspect Control Panel is prone to multiple vulnerabilities.
Impact
An attacker can exploit these issues to obtain sensitive information or to execute arbitrary script code or to execute arbitary code in the context of the application.
Solution
Ask the vendor for an update
Insight
Mailspect Control Panel is prone to
1. a remote code execution (Authenticated)
2. two arbitrary file read (Authenticated)
3. a cross site scripting vulnerability (Unauthenticated)
Affected
Mailspect Control Panel version 4.0.5
Detection
Send a crafted HTTP GET request and check the response
References
Updated on 2015-03-25
