CVE-2001-1100

ALTO 7.5CVE-2001-1100 · Published 07/10/2001 · updated 16/06/2026

In breve

CVE-2001-1100 è una vulnerabilità ALTO (CVSS 7.5) che riguarda w3mail (spencer miles).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
w3mail spencer_miles	`= 1.0.2`	No fix yet

Description

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.

References

securityfocus.com/archive/1/218921 · Exploit
securityfocus.com/bid/3673 · Vendor Advisory
w3mail.org/ChangeLog
exchange.xforce.ibmcloud.com/vulnerabilities/7230

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free