The following bug has been SUBMITTED. ====================================================================== http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000252 ====================================================================== Reported By: kaname Assigned To: ====================================================================== Project: DBMail Bug ID: 252 Category: IMAP daemon Reproducibility: always Severity: major Priority: normal Status: new ====================================================================== Date Submitted: 18-Aug-05 05:58 CEST Last Modified: 18-Aug-05 05:58 CEST ====================================================================== Summary: If a single quotation is included in the mailbox name at create mailbox, it is a problem. Description: It is a problem that gets mailbox ID before the check on the mailbox name.
It is dangerous in the mailbox name that the user input including a single quotation. It is necessary to check the mailbox name before it inquires of DB. ====================================================================== Bug History Date Modified Username Field Change ====================================================================== 18-Aug-05 05:58kaname New Bug 18-Aug-05 05:58kaname File Added: dbmail-escape5.patch ======================================================================
