Courier-mta » Courtier-authlib : Security Vulnerabilities, CVEs,
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.
Max CVSS
5.1
EPSS Score
0.44%
Published
2008-12-22
Updated
2017-08-08
SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.
Max CVSS
5.1
EPSS Score
0.48%
Published
2008-07-07
Updated
2017-08-08
2 vulnerabilities found