PT-2014-4855

Name of the Vulnerable Software and Affected Versions Postfix Admin versions prior to 2.3.7 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the gen show status function in functions.inc.php. Recommendations...