Activewebsoftwares

Active Web Mail

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-6873

  • EPSS 0.92%
  • Published 23.07.2009 19:30:01
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.

7.5

CVE-2008-5973

  • EPSS 0.37%
  • Published 27.01.2009 01:30:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.