Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0025

high · 7.5

Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.

7.5
CVSS
28.0%
EPSS (exploit prob.)
98th
EPSS percentile
2003-01-17
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
hordeimp2.2
hordeimp2.2.1
hordeimp2.2.2
hordeimp2.2.3
hordeimp2.2.4
hordeimp2.2.5
hordeimp2.2.6
hordeimp2.2.7
hordeimp2.2.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0025