CVE-2014-2655

2014-04-0200:00:00

ubuntu.com

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.003

Percentile

65.3%

JSON

SQL injection vulnerability in the gen_show_status function in
functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows
remote authenticated users to execute arbitrary SQL commands via a new
alias.

OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchpostfixadmin< 2.3.5-2+deb7u1build0.12.10.1UNKNOWN
ubuntu13.10noarchpostfixadmin< 2.3.5-2+deb7u1build0.13.10.1UNKNOWN