Executive brief
MailData Email Archiving System is an enterprise email archiving platform used to store and manage corporate email records for compliance and retention. A SQL injection vulnerability in the device management interface allows attackers to execute arbitrary database queries and extract sensitive information, potentially compromising email archives and customer data.
Technical details
The vulnerability is a SQL injection flaw (CWE-89) in MailData Email Archiving System v4.2 and earlier, located in the /monitorcenter/adddevice POST endpoint. The 'ip' parameter in the request body is not properly sanitized before being used in SQL queries, allowing an attacker to inject malicious SQL code. The attack requires network access to the endpoint but does not require authentication. Successful exploitation enables arbitrary SQL query execution, leading to unauthorized database access and potential data exfiltration. A patch or update is not yet documented in the provided advisory.
Affected products
- MailData Email Archiving System v4.2 and earlier
Timeline
- 2025-09-17: disclosed
- other: Gist disclosure on GitHub