Back to Database
Status published
High
CVE-2023-24835
Softnext SPAM SQR - Code Injection
Vulnerability Description
Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-24835
Credits & Attribution
No credits recorded in the NVD database.
More from Softnext
View All →CVE-2024-5670
Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection
Critical
9.8
CVE-2023-48382
Softnext Mail SQR Expert - Local File Inclusion-2
Medium
6.5
CVE-2023-48381
Softnext Mail SQR Expert - Local File Inclusion-1
Medium
6.5
CVE-2023-48380
Softnext Mail SQR Expert - Command Injection
High
7.4
CVE-2023-48379
Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)
Medium
5.3
Affected Vendor
Softnext
View all reports →Affected Software
SPAM SQR
Vulnerable Versions:
unspecified
Timeline
Official Publish:
March 27th, 2023
Last Modified:
February 19th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H