CVE-2008-6873 SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) e...
HighCVSS 7.5
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares active web mail | = 4.0 | No fix listed |
References
- ADV-2008-3303 vdb-entry vendor-advisory
- activewebmail-tabopenquicktab1-sql-inject(52444) vdb-entry
- 7288 exploit