CVE-2020-25849— Openfind MailGates/MailAudit - Command Injection
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-25849
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Openfind MailGates/MailAudit - Command Injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Openfind Information Technology MailGates和Openfind Information Technology MailAudit 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Openfind Information Technology MailGates和Openfind Information Technology MailAudit都是中国台湾网擎资讯（Openfind Information Technology）公司的产品。Openfind Information Technology MailGates是一套电子邮件安全防护系统。该系统支持电子邮件过滤和APT攻击防御等功能。Openfind Information Technology MailAudit是一款应
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2020-25849
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-25849
Please Login to view more intelligence information
- https://www.twcert.org.tw/tw/cp-132-4118-6292c-1.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-25849
IV. Related Vulnerabilities
Same vendor: Openfind
Same weakness: CWE-78
- CVE-2026-42454
Termix: OS Command Injection in Docker Container Management - CVE-2026-44656
Vim: OS Command Injection via 'path' completion - CVE-2026-42307
Vim: OS Command Injection in netrw - CVE-2026-41497
Incomplete fix for CVE-2026-34935: Command Injection in Merv - CVE-2022-50994
DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfu
V. Comments for CVE-2020-25849
No comments yet