CVE-2008-6873

CVE-2008-6873 concerns a SQL injection vulnerability in Active Web Mail 4.0 . The flaw allows remote attackers to manipulate the database via the TabOpenQuickTab1 parameter on three pages: popaccounts.aspx, addressbook.aspx, and emails.aspx. The affected component is the web application’s input h...

CVE-2008-6873

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to 1 popaccounts.aspx, 2 addressbook.aspx, and 3 emails.aspx...