What’s Vulnerable › Vulnerabilities

CVE-2018-20323

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 54.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-78

Description

www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.

Affected products

• MailCleaner: 2018.08

References

• http://packetstormsecurity.com/files/151056/Mailcleaner-Remote-Code-Execution.html
• https://pentest.blog/advisory-mailcleaner-community-edition-remote-code-execution/
• http://packetstormsecurity.com/files/151056/Mailcleaner-Remote-Code-Execution.html
• https://pentest.blog/advisory-mailcleaner-community-edition-remote-code-execution/

Get alerted when CVE-2018-20323 or the next vulnerability affects your stack