← Database

CVE-2008-4148

HIGH CVSS: 7.5 Published: 2008-09-24 Modified: 2026-06-16

Description

SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API.

Affected Platforms

Drupal Mailhandler

Weakness Type

CWE-89

References