CVE-2014-2655

N/A Unknown

Published: April 02, 2014 Modified: May 06, 2026

Description

SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2014-05/msg00075.html

Source: cve@mitre.org

http://sourceforge.net/p/postfixadmin/code/1650

Source: cve@mitre.org

Exploit Patch

http://www.debian.org/security/2014/dsa-2889

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/03/26/11

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/03/26/6

Source: cve@mitre.org

http://www.securityfocus.com/bid/66455

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2014-05/msg00075.html