Description (CNA)
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/20109
- http://vuln.sg/neonmail506-en.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29088
- http://secunia.com/advisories/22029
ADP enrichment
No English description supplied.