| Package | Affected versions | Patched versions |
|---|---|---|
| open webmail | = 1.7= 1.71= 1.8= 1.81= 1.90= 2.20= 2.21= 2.30= 2.31= 2.32 |
The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free