Listen to this Post
The CVE-2025-XXXX vulnerability in Z-Push versions before 2.7.6 allows SQL injection via unparameterized queries in the IMAP backend. Attackers manipulate the username field during basic authentication, injecting malicious SQL commands. This occurs when `IMAP_FROM_SQL_QUERY` is enabled, allowing unauthorized database access. The flaw stems from improper input sanitization, enabling attackers to exfiltrate, modify, or delete sensitive data from linked databases. Exploitation requires IMAP backend usage with SQL-based configurations.
DailyCVE Form:
Platform: Z-Push
Version: <2.7.6
Vulnerability: SQL Injection
Severity: High
Date: Jul 29, 2025
Prediction: Patch by Aug 15, 2025
What Undercode Say:
SELECT FROM users WHERE username = '[bash]';
define('IMAP_FROM_SQL_QUERY', 'vulnerable');
How Exploit:
1. Craft malicious username payload.
2. Trigger IMAP authentication.
3. Execute arbitrary SQL commands.
Protection from this CVE:
1. Upgrade to v2.7.6+.
2. Disable `IMAP_FROM_SQL_QUERY`.
3. Use LDAP/default config.
Impact:
- Data leakage.
- Unauthorized database modifications.
- System compromise.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
