4 matches found
Debian Security Advisory DSA 229-2 (imp)
The remote host is missing an update to imp announced via advisory DSA 229-2. OpenVAS Vulnerability Test $Id: deb2292.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 229-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 229-2 (imp)
The remote host is missing an update to imp announced via advisory DSA 229-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Horde IMP mailbox.php3 Multiple Parameter SQL Injection
The remote server is running IMP, a web-based mail client. There is a bug in the installed version which allows an attacker to perform a SQL injection attack using the 'actionID' parameter of the 'mailbox.php3' script. An attacker may use this flaw to gain unauthorized access to a user mailbox or...
CVE-2003-0025
IMP is a web-based IMAP mail client, affected in versions up to 2.2.8 and earlier. The CVE describes multiple SQL injection vulnerabilities that allow a remote attacker to perform unauthorized database activities and potentially gain privileges, via functions such as check_prefs() in db.pgsql and...