CVE-2004-1129 | BDVDB-2026-7473 Detail

Description#

SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=110137313329955&w=2
http://www.securityfocus.com/bid/11742
https://exchange.xforce.ibmcloud.com/vulnerabilities/18281
http://www.security.org.sg/vuln/cmailserver52.html

Exploit#

No public exploit known

History#

Version 12004-12-05Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.