NetSight
high7.5

CVE-2008-3063

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter.

Impact

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter.

Affected products

VendorProductAffected versions
V-WebmailV-Webmail
Version 1.5.0

Weakness classification

References