CVE-2004-1722

CVE-2004-1722 describes a SQL injection vulnerability in the calendar.html component of Merak Mail Server 5.2.7, allowing remote attackers to execute arbitrary SQL statements through the 'schedule' parameter. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for a similar version (7.4.5) exists on ExploitDB, indicating public knowledge of exploitation techniques. Despite its age and the availability of exploit code, there is no evidence of active exploitation or significant community discussion.