| Package | Affected versions | Patched versions |
|---|---|---|
| omail webmail | = 0.97.3= 0.98.3= 0.98.5 |
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free