← Database

CVE-2008-6873

HIGH CVSS: 7.5 Published: 2009-07-23 Modified: 2026-06-16

Description

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.

Affected Platforms

Activewebsoftwares Active Web Mail

Weakness Type

CWE-89

References