CVE-2005-1824

EPSS 1.0%
發布日:2005/6/2修改日:2026/4/28

描述

The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.

受影響套件(1)

參考連結(1)