CVE-2007-4538
Published: 27 August 2007
email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.
Notes
Author | Note |
---|---|
jdstrand | 2.23.4 through 3.0.0 only |