TI-2004-01866 CVE-2004-1993 · GHSA-g85p-2pm2-pfr5
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete…
Priority MEDIUM 50
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.