CVE-2011-4542

CVE-2011-4542 is a high-severity vulnerability in Hastymail Hastymail2 with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 26% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-89.

Key facts

Description

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI.

Frequently asked questions

What is CVE-2011-4542?
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI.
How severe is CVE-2011-4542?
CVE-2011-4542 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2011-4542 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 26% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2011-4542?
CVE-2011-4542 primarily affects Hastymail Hastymail2. In total, 28 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2011-4542?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2011-4542 published?
CVE-2011-4542 was published on 2011-11-30 and last updated on 2026-06-16.

References

Affected products (28)

More vulnerabilities in Hastymail Hastymail2

All CVEs affecting Hastymail Hastymail2 →

Other CWE-89 (SQL Injection) vulnerabilities

Browse all CWE-89 (SQL Injection) vulnerabilities →