Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:mailhandler:6.x-1.2:*:*:*:*:*:*:*

part: a version: 6.x-1.2 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductMailhandler (55e8df58-f5ff-5945-b3c0-16afa43750e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mbovan/mailhandler purl2cpe 2026-06-01 10:11:36.414637

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4148 vulnerable 2026-06-08 04:50:37.967524 Details available
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API.
Published: 2008-09-19T18:00:00.000Z
Updated: 2024-08-07T10:08:34.185Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.