Vulnerabilities > CVE-2004-1993 - Unspecified vulnerability in Omail Webmail 0.97.3/0.98.3/0.98.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
omail
NVD
Published: 2004-05-04
Updated: 2024-11-20

Summary

The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.

Vulnerable Configurations

Part Description Count
Application
Omail
3

References