Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2009-1468

🗓️ 05 May 2009 20:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

Multiple SQL injection vulnerabilities in IceWarp eMail Server & WebMail Server

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Tenable Nessus		IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
18 Aug 200400:00
–nessus
Tenable Nessus		IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
8 May 200900:00
–nessus
Circl		CVE-2009-1468
5 May 200900:00
–circl
Cvelist		CVE-2009-1468
5 May 200920:00
–cvelist
EUVD		EUVD-2009-1466
7 Oct 202500:30
–euvd
NVD		CVE-2009-1468
5 May 200920:30
–nvd
Packet Storm		IceWarp WebMail SQL Injection
5 May 200900:00
–packetstorm
Prion		Sql injection
5 May 200920:30
–prion
securityvulns		[RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component
5 May 200900:00
–securityvulns
securityvulns		[RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component
5 May 200900:00
–securityvulns
Rows per page
NVD
Node
icewarpemail_serverRange≤9.3.0
OR
icewarpemail_serverMatch2.10.105
OR
icewarpemail_serverMatch2.10.110
OR
icewarpemail_serverMatch2.10.115
OR
icewarpemail_serverMatch2.10.140
OR
icewarpemail_serverMatch2.10.150
OR
icewarpemail_serverMatch2.10.165
OR
icewarpemail_serverMatch2.10.170
OR
icewarpemail_serverMatch2.10.190
OR
icewarpemail_serverMatch2.10.200
OR
icewarpemail_serverMatch2.10.210
OR
icewarpemail_serverMatch2.10.220
OR
icewarpemail_serverMatch2.10.240
OR
icewarpemail_serverMatch2.10.250
OR
icewarpemail_serverMatch2.10.260
OR
icewarpemail_serverMatch2.10.280
OR
icewarpemail_serverMatch2.10.290
OR
icewarpemail_serverMatch2.10.310
OR
icewarpemail_serverMatch2.10.320
OR
icewarpemail_serverMatch2.10.330
OR
icewarpemail_serverMatch2.10.331
OR
icewarpemail_serverMatch2.10.340
OR
icewarpemail_serverMatch2.10.350
OR
icewarpemail_serverMatch2.10.360
OR
icewarpemail_serverMatch3.00.100
OR
icewarpemail_serverMatch3.00.110
OR
icewarpemail_serverMatch3.00.120
OR
icewarpemail_serverMatch3.00.130
OR
icewarpemail_serverMatch3.00.140
OR
icewarpemail_serverMatch3.10.011
OR
icewarpemail_serverMatch3.10.110
OR
icewarpemail_serverMatch4.00.30
OR
icewarpemail_serverMatch4.2.1
OR
icewarpemail_serverMatch4.2.2
OR
icewarpemail_serverMatch4.2.3
OR
icewarpemail_serverMatch4.4.1
OR
icewarpemail_serverMatch4.4.2
OR
icewarpemail_serverMatch4.10.040
OR
icewarpemail_serverMatch4.10.050
OR
icewarpemail_serverMatch5.1.2
OR
icewarpemail_serverMatch5.1.3
OR
icewarpemail_serverMatch5.1.5
OR
icewarpemail_serverMatch5.3.0
OR
icewarpemail_serverMatch5.3.2
OR
icewarpemail_serverMatch5.4.1
OR
icewarpemail_serverMatch5.4.2
OR
icewarpemail_serverMatch5.4.3
OR
icewarpemail_serverMatch5.4.4
OR
icewarpemail_serverMatch5.5.3
OR
icewarpemail_serverMatch5.5.4
OR
icewarpemail_serverMatch5.5.5
OR
icewarpemail_serverMatch5.5.6
OR
icewarpemail_serverMatch5.5.7
OR
icewarpemail_serverMatch5.7.3
OR
icewarpemail_serverMatch5.8.2
OR
icewarpemail_serverMatch5.8.3
OR
icewarpemail_serverMatch5.8.4
OR
icewarpemail_serverMatch5.8.5
OR
icewarpemail_serverMatch5.8.6
OR
icewarpemail_serverMatch5.9.4
OR
icewarpemail_serverMatch6.0.2
OR
icewarpemail_serverMatch6.0.3
OR
icewarpemail_serverMatch6.0.5
OR
icewarpemail_serverMatch6.0.7
OR
icewarpemail_serverMatch6.1.0
OR
icewarpemail_serverMatch6.2.1
OR
icewarpemail_serverMatch7.0.1
OR
icewarpemail_serverMatch7.1.4
OR
icewarpemail_serverMatch7.1.6
OR
icewarpemail_serverMatch7.2.0
OR
icewarpemail_serverMatch7.4.0
OR
icewarpemail_serverMatch7.4.2
OR
icewarpemail_serverMatch7.4.5
OR
icewarpemail_serverMatch7.5.2
OR
icewarpemail_serverMatch7.6.0
OR
icewarpemail_serverMatch7.6.4
OR
icewarpemail_serverMatch8.0.1
OR
icewarpemail_serverMatch8.0.2
OR
icewarpemail_serverMatch8.0.3
OR
icewarpemail_serverMatch8.2.0
OR
icewarpemail_serverMatch8.2.2
OR
icewarpemail_serverMatch8.3.5
OR
icewarpemail_serverMatch8.3.8
OR
icewarpemail_serverMatch8.5.0
OR
icewarpemail_serverMatch8.9.1
OR
icewarpemail_serverMatch9.0.0
OR
icewarpemail_serverMatch9.1.0
OR
icewarpemail_serverMatch9.2.0
OR
icewarpwebmail_serverRange≤9.3.0
OR
icewarpwebmail_serverMatch2.10.105
OR
icewarpwebmail_serverMatch2.10.110
OR
icewarpwebmail_serverMatch2.10.115
OR
icewarpwebmail_serverMatch2.10.140
OR
icewarpwebmail_serverMatch2.10.150
OR
icewarpwebmail_serverMatch2.10.165
OR
icewarpwebmail_serverMatch2.10.170
OR
icewarpwebmail_serverMatch2.10.190
OR
icewarpwebmail_serverMatch2.10.200
OR
icewarpwebmail_serverMatch2.10.210
OR
icewarpwebmail_serverMatch2.10.220
OR
icewarpwebmail_serverMatch2.10.240
OR
icewarpwebmail_serverMatch2.10.250
OR
icewarpwebmail_serverMatch2.10.260
OR
icewarpwebmail_serverMatch2.10.280
OR
icewarpwebmail_serverMatch2.10.290
OR
icewarpwebmail_serverMatch2.10.310
OR
icewarpwebmail_serverMatch2.10.320
OR
icewarpwebmail_serverMatch2.10.330
OR
icewarpwebmail_serverMatch2.10.331
OR
icewarpwebmail_serverMatch2.10.340
OR
icewarpwebmail_serverMatch2.10.350
OR
icewarpwebmail_serverMatch2.10.360
OR
icewarpwebmail_serverMatch3.00.100
OR
icewarpwebmail_serverMatch3.00.110
OR
icewarpwebmail_serverMatch3.00.120
OR
icewarpwebmail_serverMatch3.00.130
OR
icewarpwebmail_serverMatch3.00.140
OR
icewarpwebmail_serverMatch3.10.011
OR
icewarpwebmail_serverMatch3.10.110
OR
icewarpwebmail_serverMatch4.00.30
OR
icewarpwebmail_serverMatch4.2.1
OR
icewarpwebmail_serverMatch4.2.2
OR
icewarpwebmail_serverMatch4.2.3
OR
icewarpwebmail_serverMatch4.4.1
OR
icewarpwebmail_serverMatch4.4.2
OR
icewarpwebmail_serverMatch4.10.040
OR
icewarpwebmail_serverMatch4.10.050
OR
icewarpwebmail_serverMatch5.1.2
OR
icewarpwebmail_serverMatch5.1.3
OR
icewarpwebmail_serverMatch5.1.5
OR
icewarpwebmail_serverMatch5.3.0
OR
icewarpwebmail_serverMatch5.3.2
OR
icewarpwebmail_serverMatch5.4.1
OR
icewarpwebmail_serverMatch5.4.2
OR
icewarpwebmail_serverMatch5.4.3
OR
icewarpwebmail_serverMatch5.4.4
OR
icewarpwebmail_serverMatch5.5.3
OR
icewarpwebmail_serverMatch5.5.4
OR
icewarpwebmail_serverMatch5.5.5
OR
icewarpwebmail_serverMatch5.5.6
OR
icewarpwebmail_serverMatch5.5.7
OR
icewarpwebmail_serverMatch5.7.3
OR
icewarpwebmail_serverMatch5.8.2
OR
icewarpwebmail_serverMatch5.8.3
OR
icewarpwebmail_serverMatch5.8.4
OR
icewarpwebmail_serverMatch5.8.5
OR
icewarpwebmail_serverMatch5.8.6
OR
icewarpwebmail_serverMatch5.9.4
OR
icewarpwebmail_serverMatch6.0.2
OR
icewarpwebmail_serverMatch6.0.3
OR
icewarpwebmail_serverMatch6.0.5
OR
icewarpwebmail_serverMatch6.0.7
OR
icewarpwebmail_serverMatch6.1.0
OR
icewarpwebmail_serverMatch6.2.1
OR
icewarpwebmail_serverMatch7.0.1
OR
icewarpwebmail_serverMatch7.1.4
OR
icewarpwebmail_serverMatch7.1.6
OR
icewarpwebmail_serverMatch7.2.0
OR
icewarpwebmail_serverMatch7.4.0
OR
icewarpwebmail_serverMatch7.4.2
OR
icewarpwebmail_serverMatch7.4.5
OR
icewarpwebmail_serverMatch7.5.2
OR
icewarpwebmail_serverMatch7.6.0
OR
icewarpwebmail_serverMatch7.6.4
OR
icewarpwebmail_serverMatch8.0.1
OR
icewarpwebmail_serverMatch8.0.2
OR
icewarpwebmail_serverMatch8.0.3
OR
icewarpwebmail_serverMatch8.2.0
OR
icewarpwebmail_serverMatch8.2.2
OR
icewarpwebmail_serverMatch8.3.5
OR
icewarpwebmail_serverMatch8.3.8
OR
icewarpwebmail_serverMatch8.5.0
OR
icewarpwebmail_serverMatch8.9.1
OR
icewarpwebmail_serverMatch9.0.0
OR
icewarpwebmail_serverMatch9.1.0
OR
icewarpwebmail_serverMatch9.2.0
ParameterPositionPathDescriptionCWE
sqlrequest bodywebmail/server/webmail.phpSQL injection vulnerability in IceWarp WebMail Server Groupware search form allows remote authenticated users to execute arbitrary SQL via sql and order_by elements in the XML search query.CWE-89
order_byrequest bodywebmail/server/webmail.phpSQL injection vulnerability in IceWarp WebMail Server Groupware search form allows remote authenticated users to execute arbitrary SQL via sql and order_by elements in the XML search query.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Apr 2026 00:35Current
8.1High risk
Vulners AI Score8.1
CVSS 26.5
EPSS0.00302
CWE-89
cve-2009-1468sql injectionicewarp email serverwebmail servergroupware componentsecurity vulnerability
52