Skip to content
OpenAdvisories
Unscored CVE-2018-0685 EUVD-2018-1495GHSA-h383-hj5j-qrh7

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL…

Published Nov 15, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: NEOJAPAN Product: Denbun POP version V3.3P R4.0 and earlier

Description

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

Affected products

VendorProductAffectedFixed
NEOJAPAN Denbun POP version V3.3P R4.0 and earlier Denbun POP version V3.3P R4.0 and earlier —

References