CVE-2008-5973

Description

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected products

• activewebsoftwares / active_web_mail4.0 – 4.0

References

• EXPLOIThttps://www.exploit-db.com/exploits/7281
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/46915
• VENDOR_ADVISORYhttp://secunia.com/advisories/32921