Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2004-1993

Disclosure Date: May 04, 2004 (last updated February 22, 2025)
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.
0
0
Attacker Value
Unknown

CVE-2003-1202

Disclosure Date: August 19, 2003 (last updated February 22, 2025)
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.
0
0