CVE-2008-5973: Activewebsoftwares Active Web Mail

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected products

• Activewebsoftwares Active Web Mail: version 4.0 only

Published 2009-01-27. Last modified 2026-06-16.