Description (CNA)
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.exploit-db.com/exploits/7288
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52444
- http://www.vupen.com/english/advisories/2008/3303
ADP enrichment
No English description supplied.