CVE-2008-1874

SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to execute arbitrary SQL commands via the reed parameter.

Date published : 2008-04-17

http://www.securityfocus.com/bid/28618

https://www.exploit-db.com/exploits/5358