2009-05-05 22:30:00 2018-10-10 21:37:01

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Icewarp Webmail server 6.2.1 (not an official CPE) Icewarp Webmail server 6.1.0 (not an official CPE) Icewarp Webmail server 6.0.7 (not an official CPE) Icewarp Webmail server 6.0.5 (not an official CPE) Icewarp Webmail server 6.0.3 (not an official CPE) Icewarp Webmail server 6.0.2 (not an official CPE) Icewarp Webmail server 5.9.4 (not an official CPE) Icewarp Webmail server 5.8.6 (not an official CPE) Icewarp Webmail server 5.8.5 (not an official CPE) Icewarp Webmail server 5.8.4 (not an official CPE) Icewarp Webmail server 5.8.3 (not an official CPE) Icewarp Webmail server 5.8.2 (not an official CPE) Icewarp Webmail server 5.7.3 (not an official CPE) Icewarp Webmail server 5.5.7 (not an official CPE) Icewarp Webmail server 5.5.6 (not an official CPE) Icewarp Webmail server 5.5.5 (not an official CPE) Icewarp Webmail server 5.5.4 (not an official CPE) Icewarp Webmail server 5.5.3 (not an official CPE) Icewarp Webmail server 5.4.4 (not an official CPE) Icewarp Webmail server 5.4.3 (not an official CPE) Icewarp Webmail server 5.4.2 (not an official CPE) Icewarp Webmail server 5.4.1 (not an official CPE) Icewarp Webmail server 5.3.2 (not an official CPE) Icewarp Webmail server 5.3.0 (not an official CPE) Icewarp Webmail server 5.1.5 (not an official CPE) Icewarp Webmail server 5.1.3 (not an official CPE) Icewarp Webmail server 5.1.2 (not an official CPE) Icewarp Webmail server 4.10.050 (not an official CPE) Icewarp Webmail server 4.10.040 (not an official CPE) Icewarp Webmail server 4.4.2 (not an official CPE) Icewarp Webmail server 4.4.1 (not an official CPE) Icewarp Webmail server 4.2.3 (not an official CPE) Icewarp Webmail server 4.2.2 (not an official CPE) Icewarp Webmail server 4.2.1 (not an official CPE) Icewarp Webmail server 4.00.30 (not an official CPE) Icewarp Webmail server 3.10.110 (not an official CPE) Icewarp Webmail server 3.10.011 (not an official CPE) Icewarp Webmail server 3.00.140 (not an official CPE) Icewarp Webmail server 3.00.130 (not an official CPE) Icewarp Webmail server 3.00.120 (not an official CPE) Icewarp Webmail server 3.00.110 (not an official CPE) Icewarp Webmail server 3.00.100 (not an official CPE) Icewarp Webmail server 2.10.360 (not an official CPE) Icewarp Webmail server 2.10.350 (not an official CPE) Icewarp Webmail server 2.10.340 (not an official CPE) Icewarp Webmail server 2.10.331 (not an official CPE) Icewarp Webmail server 2.10.330 (not an official CPE) Icewarp Webmail server 2.10.320 (not an official CPE) Icewarp Webmail server 2.10.310 (not an official CPE) Icewarp Webmail server 2.10.290 (not an official CPE) Icewarp Webmail server 2.10.280 (not an official CPE) Icewarp Webmail server 2.10.260 (not an official CPE) Icewarp Webmail server 2.10.250 (not an official CPE) Icewarp Webmail server 2.10.240 (not an official CPE) Icewarp Webmail server 2.10.220 (not an official CPE) Icewarp Webmail server 2.10.210 (not an official CPE) Icewarp Webmail server 2.10.200 (not an official CPE) Icewarp Webmail server 2.10.190 (not an official CPE) Icewarp Webmail server 2.10.170 (not an official CPE) Icewarp Webmail server 2.10.165 (not an official CPE) Icewarp Webmail server 2.10.150 (not an official CPE) Icewarp Webmail server 2.10.140 (not an official CPE) Icewarp Webmail server 2.10.115 (not an official CPE) Icewarp Webmail server 2.10.110 (not an official CPE) Icewarp Webmail server 2.10.105 (not an official CPE) Icewarp Email server 9.3.0 (not an official CPE) Icewarp Email server 9.2.0 (not an official CPE) Icewarp Email server 9.1.0 (not an official CPE) Icewarp Email server 9.0.0 (not an official CPE) Icewarp Email server 8.9.1 (not an official CPE) Icewarp Email server 8.5.0 (not an official CPE) Icewarp Email server 8.3.8 (not an official CPE) Icewarp Email server 8.3.5 (not an official CPE) Icewarp Email server 8.2.2 (not an official CPE) Icewarp Email server 8.2.0 (not an official CPE) Icewarp Email server 8.0.3 (not an official CPE) Icewarp Email server 8.0.2 (not an official CPE) Icewarp Email server 8.0.1 (not an official CPE) Icewarp Email server 7.6.4 (not an official CPE) Icewarp Email server 7.6.0 (not an official CPE) Icewarp Email server 7.5.2 (not an official CPE) Icewarp Email server 7.4.5 (not an official CPE) Icewarp Email server 7.4.2 (not an official CPE) Icewarp Email server 7.4.0 (not an official CPE) Icewarp Email server 7.2.0 (not an official CPE) Icewarp Email server 7.1.6 (not an official CPE) Icewarp Email server 7.1.4 (not an official CPE) Icewarp Email server 7.0.1 (not an official CPE) Icewarp Email server 6.2.1 (not an official CPE) Icewarp Email server 6.1.0 (not an official CPE) Icewarp Email server 6.0.7 (not an official CPE) Icewarp Email server 6.0.5 (not an official CPE) Icewarp Email server 6.0.3 (not an official CPE) Icewarp Email server 6.0.2 (not an official CPE) Icewarp Email server 5.9.4 (not an official CPE) Icewarp Email server 5.8.6 (not an official CPE) Icewarp Email server 5.8.5 (not an official CPE) Icewarp Email server 5.8.4 (not an official CPE) Icewarp Email server 5.8.3 (not an official CPE) Icewarp Email server 5.8.2 (not an official CPE) Icewarp Email server 5.7.3 (not an official CPE) Icewarp Email server 5.5.7 (not an official CPE) Icewarp Email server 5.5.6 (not an official CPE) Icewarp Email server 5.5.5 (not an official CPE) Icewarp Email server 5.5.4 (not an official CPE) Icewarp Email server 5.5.3 (not an official CPE) Icewarp Email server 5.4.4 (not an official CPE) Icewarp Email server 5.4.3 (not an official CPE) Icewarp Email server 5.4.2 (not an official CPE) Icewarp Email server 5.4.1 (not an official CPE) Icewarp Email server 5.3.2 (not an official CPE) Icewarp Email server 5.3.0 (not an official CPE) Icewarp Email server 5.1.5 (not an official CPE) Icewarp Email server 5.1.3 (not an official CPE) Icewarp Email server 5.1.2 (not an official CPE) Icewarp Email server 4.10.050 (not an official CPE) Icewarp Email server 4.10.040 (not an official CPE) Icewarp Email server 4.4.2 (not an official CPE) Icewarp Email server 4.4.1 (not an official CPE) Icewarp Email server 4.2.3 (not an official CPE) Icewarp Email server 4.2.2 (not an official CPE) Icewarp Email server 4.2.1 (not an official CPE) Icewarp Email server 4.00.30 (not an official CPE) Icewarp Email server 3.10.110 (not an official CPE) Icewarp Email server 3.10.011 (not an official CPE) Icewarp Email server 3.00.140 (not an official CPE) Icewarp Email server 3.00.130 (not an official CPE) Icewarp Email server 3.00.120 (not an official CPE) Icewarp Email server 3.00.110 (not an official CPE) Icewarp Email server 3.00.100 (not an official CPE) Icewarp Email server 2.10.360 (not an official CPE) Icewarp Email server 2.10.350 (not an official CPE) Icewarp Email server 2.10.340 (not an official CPE) Icewarp Email server 2.10.331 (not an official CPE) Icewarp Email server 2.10.330 (not an official CPE) Icewarp Email server 2.10.320 (not an official CPE) Icewarp Email server 2.10.310 (not an official CPE) Icewarp Email server 2.10.290 (not an official CPE) Icewarp Email server 2.10.280 (not an official CPE) Icewarp Email server 2.10.260 (not an official CPE) Icewarp Email server 2.10.250 (not an official CPE) Icewarp Email server 2.10.240 (not an official CPE) Icewarp Email server 2.10.220 (not an official CPE) Icewarp Email server 2.10.210 (not an official CPE) Icewarp Email server 2.10.200 (not an official CPE) Icewarp Email server 2.10.190 (not an official CPE) Icewarp Email server 2.10.170 (not an official CPE) Icewarp Email server 2.10.165 (not an official CPE) Icewarp Email server 2.10.150 (not an official CPE) Icewarp Email server 2.10.140 (not an official CPE) Icewarp Email server 2.10.115 (not an official CPE) Icewarp Email server 2.10.110 (not an official CPE) Icewarp Email server 2.10.105 (not an official CPE) Icewarp Webmail server 7.0.1 (not an official CPE) Icewarp Webmail server 7.1.4 (not an official CPE) Icewarp Webmail server 7.1.6 (not an official CPE) Icewarp Webmail server 7.2.0 (not an official CPE) Icewarp Webmail server 7.4.0 (not an official CPE) Icewarp Webmail server 7.4.2 (not an official CPE) Icewarp Webmail server 7.4.5 (not an official CPE) Icewarp Webmail server 7.5.2 (not an official CPE) Icewarp Webmail server 7.6.0 (not an official CPE) Icewarp Webmail server 7.6.4 (not an official CPE) Icewarp Webmail server 8.0.1 (not an official CPE) Icewarp Webmail server 8.0.2 (not an official CPE) Icewarp Webmail server 8.0.3 (not an official CPE) Icewarp Webmail server 8.2.0 (not an official CPE) Icewarp Webmail server 8.2.2 (not an official CPE) Icewarp Webmail server 8.3.5 (not an official CPE) Icewarp Webmail server 8.3.8 (not an official CPE) Icewarp Webmail server 8.5.0 (not an official CPE) Icewarp Webmail server 8.9.1 (not an official CPE) Icewarp Webmail server 9.0.0 (not an official CPE) Icewarp Webmail server 9.1.0 (not an official CPE) Icewarp Webmail server 9.2.0 (not an official CPE) Icewarp Webmail server 9.3.0 (not an official CPE)