CVE-2018-0685

Description

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

References

https://www.denbun.com/en/pop/support/security/181003.html

https://www.denbun.com/en/imap/support/security/181003.html

http://jvn.jp/en/jp/JVN00344155/index.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS