Vulnerability in Spencer Miles W3mail

CVE-2001-1100

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

Spencer_miles W3mail — versions 1.0.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM)