← All advisories

Critical severity9.8NVD Advisory· Published Feb 7, 2024· Updated Jun 17, 2026

CVE-2024-24133

CVE-2024-24133

Description

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.

Affected products

4

Atmail/Atmail4 versions
cpe:2.3:a:atmail:atmail:6.3.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:atmail:atmail:6.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:atmail:atmail:6.6.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 6.6.0

Patches

Vulnerability mechanics

References

1

github.com/Hebing123/cve/issues/16nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.