CVE-2004-1722

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-17 · updated 2026-06-16

Description

SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter.

Affected products

Merak Mail Server: 7.5.2

References

http://marc.info/?l=bugtraq&m=109279057326044&w=2
http://packetstormsecurity.nl/0408-exploits/merak527.txt
http://secunia.com/advisories/12269
http://securitytracker.com/id?1010969
http://www.osvdb.org/9044
http://www.securityfocus.com/bid/10966
https://exchange.xforce.ibmcloud.com/vulnerabilities/17022
http://marc.info/?l=bugtraq&m=109279057326044&w=2
http://packetstormsecurity.nl/0408-exploits/merak527.txt
http://secunia.com/advisories/12269
http://securitytracker.com/id?1010969
http://www.osvdb.org/9044

Get alerted when CVE-2004-1722 or the next vulnerability affects your stack