CVE-2018-0685

Summary

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

Affected Software

VendorProductVersion RangeStatus
NEOJAPAN Inc.Denbun POP version V3.3P R4.0 and earlierDenbun POP version V3.3P R4.0 and earlieraffected

Weaknesses

  • SQL Injection

ADP Enrichment

CVE Program Container

Additional References

References