Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Courier-IMAP用户名SQL注入漏洞
Vulnerability Description
Courier-IMAP是一个提供IMAP协议访问Maildir的邮件服务程序。 Courier-IMAP在验证阶段不充分过滤用户提供的用户名数据，远程攻击者可以利用这个漏洞进行SQL注入攻击，破坏数据库。 Courier-IMAP中的PostgreSQL_auth验证模块存在漏洞，在把用户名传递给PostgreSQL引擎的时候，没有充分过滤恶意字符，攻击者可以在用户名中插入任意SQL命令，更改原来的SQL逻辑，导致获得数据库敏感信息，或者进行其他数据库破坏等恶意活动。
CVSS Information
N/A
Vulnerability Type
N/A