| Package | Affected versions | Patched versions |
|---|---|---|
| omail webmail | = 0.97.3= 0.98.4 |
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free