BID:8495

akpop3d User Name SQL Injection Vulnerability

Info

akpop3d User Name SQL Injection Vulnerability

Bugtraq ID:	8495
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2003 12:00AM
Updated:	Aug 26 2003 12:00AM
Credit:	The disclosure of this issue has been credited to Secunia Security.
Vulnerable:	akpop3d akpop3d 0.7.5 akpop3d akpop3d 0.7.4 akpop3d akpop3d 0.7.3 akpop3d akpop3d 0.7.2 akpop3d akpop3d 0.7.1 akpop3d akpop3d 0.7 akpop3d akpop3d 0.6 akpop3d akpop3d 0.5 akpop3d akpop3d 0.4

Not Vulnerable:

Discussion

akpop3d User Name SQL Injection Vulnerability

It has been reported that a SQL injection vulnerability may exist in the username input parameter in akpop3d. This issue may make it possible for malicious input to be passed to database queries.

Successful exploitation of this vulnerability may allow an attacker to gain access to sensitive information or launch other attacks against the underlying database.

A valid password may be required in order to successfully exploit this issue.

Exploit / POC

akpop3d User Name SQL Injection Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

akpop3d User Name SQL Injection Vulnerability

Solution:
The vendor has released version 0.7.6 in order to address this issue.

akpop3d akpop3d 0.4