CVE-2008-5926: Asp-Dev Internal E-Mail System

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the (1) login parameter (aka user field) or the (2) password parameter (aka pass field). NOTE: some of these details are obtained from third party information.

Affected products

• Asp-Dev Internal E-Mail System: any version

Published 2009-01-21. Last modified 2026-06-16.