Description (CNA)
sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/3673
- http://www.securityfocus.com/archive/1/218921
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7230
- http://www.w3mail.org/ChangeLog
ADP enrichment
No English description supplied.