← Database

CVE-2008-5973

HIGH CVSS: 7.5 Published: 2009-01-27 Modified: 2026-06-16

Description

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected Platforms

Activewebsoftwares Active Web Mail

Weakness Type

CWE-89

References