SQL Injection Vulnerabilities in IMP Webmail by Horde Group
CVE-2003-0025

Currently unrated

Key Information:

Vendor: Horde
Status: Imp
Vendor: CVE Published:; 17 January 2003

What is CVE-2003-0025?

IMP versions 2.2.8 and earlier contain multiple SQL injection vulnerabilities that enable remote attackers to manipulate the database. These vulnerabilities can be exploited via certain functions such as check_prefs() in db.pgsql, particularly demonstrated through the mailbox.php3 script. Successful exploitation may allow attackers to execute unauthorized database operations, potentially gaining elevated privileges and compromising sensitive data.

References

http://secunia.com/advisories/8087

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/archive/1/306268

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/6559

vdb-entryx_refsource_BID

EPSS Score

24% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 17, 2003
Vulnerability Reserved
Jan 10, 2003

CVE-2003-0025 Data

JSON