{"vulnerability": "CVE-2019-1292", "sightings": [{"uuid": "4047b7ae-a72e-4613-b847-42047158a332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12926", "type": "seen", "source": "https://t.me/cveNotify/323", "content": "\ud83d\udea8 #CVE-2019-12926\nMailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission t... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12926\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T23:59:56.000000Z"}, {"uuid": "b6cff502-646a-474a-854a-f27c3c78e362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12928", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:58.000000Z"}, {"uuid": "99c1709f-b3af-45ca-815f-e3c8eef5313d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12923", "type": "seen", "source": "https://t.me/cveNotify/320", "content": "\ud83d\udea8 #CVE-2019-12923\nIn MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This c... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12923\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T23:59:53.000000Z"}, {"uuid": "72152272-a1bc-416d-a17a-97880ab9330f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12924", "type": "seen", "source": "https://t.me/cveNotify/321", "content": "\ud83d\udea8 #CVE-2019-12924\nMailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML p... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12924\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T23:59:54.000000Z"}, {"uuid": "ee870a78-b46b-4333-930e-23efe3a1d1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12925", "type": "seen", "source": "https://t.me/cveNotify/322", "content": "\ud83d\udea8 #CVE-2019-12925\nMailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to rea... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12925\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T23:59:55.000000Z"}, {"uuid": "0a022b4f-f5d1-49eb-853e-2539d8822fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12928", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/qemu_monitor_hmp_migrate_cmd_exec.rb", "content": "", "creation_timestamp": "2022-02-07T22:01:55.000000Z"}, {"uuid": "66fe8a95-5bcc-4ad7-ad62-1dfc5b4519fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12927", "type": "seen", "source": "https://t.me/cveNotify/324", "content": "\ud83d\udea8 #CVE-2019-12927\nMailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulne... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12927\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T23:59:57.000000Z"}]}