Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-4953. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in Neon WebMail, including SQL injection, file upload, and directory traversal issues. It includes a proof-of-concept URL demonstrating a time-based SQL injection attack.
Description
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet.
Exploits (2)
The provided text describes multiple vulnerabilities in Neon WebMail, including SQL injection, file upload, and directory traversal issues. It includes a proof-of-concept URL demonstrating a time-based SQL injection attack.
The provided text describes multiple vulnerabilities in Neon WebMail, including SQL injection, file upload, and directory traversal. It includes a sample SQL injection payload but lacks executable exploit code.