Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Apr 16, 2026

CVE-2003-1523

Description

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.

Affected products

Dbmail/Dbmail2 versions
cpe:2.3:a:dbmail:dbmail:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dbmail:dbmail:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dbmail:dbmail:1.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/8829nvdPatch
secunia.com/advisories/10001nvdVendor Advisory
mailman.fastxs.net/pipermail/dbmail/2003-July/003252.htmlnvd
exchange.xforce.ibmcloud.com/vulnerabilities/13416nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000