CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

Date published : 2018-11-15

http://jvn.jp/en/jp/JVN00344155/index.html

https://www.denbun.com/en/imap/support/security/181003.html