| Package | Affected versions | Patched versions |
|---|---|---|
| mailman webmail | = 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.18= 3.0.19= 3.0.20= 3.0.21= 3.0.22= 3.0.23= 3.0.24= 3.0.25 |
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free