iXmail index.php password Parameter SQL Injection

The remote host is running the iXmail webmail interface. There is a flaw in this interface that allows an attacker to log in as any user by using a SQL injection flaw in the code of index.php. An attacker may use this flaw to gain unauthorized access on this host, or to gain the control of the...