Vulnerabilities > Supmua

DATE CVE VULNERABILITY TITLE RISK
2013-12-07 CVE-2013-4479 Code Injection vulnerability in Supmua SUP
lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.
network
supmua CWE-94
6.8
2013-12-07 CVE-2013-4478 Code Injection vulnerability in Supmua SUP
Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment.
network
supmua CWE-94
6.8