CVE

Id
36090  
CVE No.
CVE-2008-5973  
Status
Candidate  
Description
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.  
Phase
Assigned (20090126)  
Votes
None (candidate not yet proposed)  
Comments