MailData Email Archiving System versions 4.2 and earlier contain a SQL injection vulnerability. This flaw allows attackers to inject malicious SQL code into database queries, potentially compromising the integrity and confidentiality of stored data. The vulnerability is publicly known but lacks detailed CVSS scoring and vendor patch information.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, data modification, or deletion. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing vulnerable interfaces to untrusted users and consider implementing web application firewalls or input validation as temporary mitigations.