CVE-2005-1824 | BDVDB-2026-10559 Detail

Description#

The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12005-06-02Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.