NVD

Id
48744  
Name
CVE-2009-1468  
Description
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-05  
Modified Date
2009-05-16  
Seq
2009-1468  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246257 48744 CVE-2009-1468 http://www.redteam-pentesting.de/advisories/rt-sa-2009-003  View
246258 48744 CVE-2009-1468 20090505 [RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component  View
246259 48744 CVE-2009-1468 34820  View
246260 48744 CVE-2009-1468 1022169  View
246261 48744 CVE-2009-1468 ADV-2009-1253  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43608 JVNDB-2009-004615 IceWarp の eMail Server などの製品で使用される検索フォームにおける SQL インジェクションの脆弱性 IceWarp の eMail Server および WebMail Server の Groupware コンポーネントの server/webmail.php の検索フォームには、SQL インジェクションの脆弱性が存在します。 CVE-2009-1468 38899 CVE-2009-1468 48744 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004615.html 2009-05-05 2012-09-25 View