CVE-2008-6873: Activewebsoftwares Active Web Mail

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.

Affected products

• Activewebsoftwares Active Web Mail: version 4.0 only

Published 2009-07-23. Last modified 2026-06-16.