CVE-2003-0025
NoneCVSS
—
EPSS
28.0%
Published
Jan 17, 2003
CISA due date
—
The record
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | imp | 0 | 2.2.6-5.1 |