CVE-2018-0685 SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.
HighCVSS 8.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neo debun pop | <= 3.3p_r4.0 | No fix listed |
| neojapan Denbun POP version V3.3P R4.0 and earlier | = Denbun POP version V3.3P R4.0 and earlier | No fix listed |
References
- JVN#00344155 third-party-advisory
- www.denbun.com vendor-advisory
- www.denbun.com vendor-advisory