Threats tagged 'ghsa-g98g-j6w4-w22m'

Progressive Robot hMailServer versions 6.0.0-B1 through 6.2.18 have an SQL injection vulnerability in their database layer when using MySQL/MariaDB or PostgreSQL. This flaw allows remote attackers to alter SQL statements executed by the server, potentially leading to full compromise of the database contents and integrity. The vulnerability arises from improper parameter handling, enabling injection via message recipient addresses and certain message metadata. SQL Server and SQL Server Compact are not affected due to proper parameter binding.