| Package | Affected versions | Patched versions |
|---|---|---|
| xcs | = 10.0= 9.2 |
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free