References https://nvd.nist.gov/vuln/detail/CVE-2013-10001 https://vuldb.com/?id.8900 https://cve.imfht.com/detail/CVE-2013-10001?lang=en https://www.cve.org/CVERecord?id=CVE-2013-10001 https://www.cvedetails.com/cve/CVE-2013-10001/ https://vuldb.com/?id.8900 http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/
Related VulnerabilitiesPoCafterlogic-path-disclosure: AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path DisclosurePoCcpanel-mailman-xss: cPanel Mailman - Cross-Site ScriptingPoCCVE-2026-24423: SmarterMail - Remote Code ExecutionPoCCVE-2026-40878: Mailcow < 2026-03b - Href Link Injection網擎資訊|MailGates/MailAudit - 存在2個漏洞PoCCVE-2026-2025: Mail Mint < 1.19.5 - Unauthenticated Email DisclosurePoCCVE-2026-23829: Mailpit < 1.28.2 - SMTP CRLF InjectionMailpit CVE-2026-21859 ssrfPoCCVE-2022-0439: Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL InjectionPoCCVE-2024-13098: WordPress Email Newsletter - Reflected XSSMailpit /proxy 服务器端请求伪造漏洞(CVE-2026-21859)PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞(CVE-2026-24423)