Unscored CVE-2003-1523 EUVD-2003-1513GHSA-5gcj-j7v3-fr39

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login us…

Published Oct 25, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.

References

dbmail-multiple-sql-injection(13416) vdb-entry
[Dbmail] 20030725 WARNING SECURITY FLAW IN IMAPSERVER mailing-list
10001 third-party-advisory
8829 vdb-entry