Unrated severityNVD Advisory· Published Sep 23, 2006· Updated Jun 16, 2026
CVE-2006-4953
CVE-2006-4953
Description
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*+ 1 more
- cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*
- cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- secunia.com/advisories/22029nvdPatchVendor Advisory
- vuln.sg/neonmail506-en.htmlnvdExploitPatch
- www.securityfocus.com/bid/20109nvdExploitPatch
- exchange.xforce.ibmcloud.com/vulnerabilities/29088nvd
News mentions
0No linked articles in our index yet.