CVE-2007-4538

2007-08-27T17:17:00
ID CVE-2007-4538
Type cve
Reporter NVD
Modified 2018-10-15T17:35:57

Description

email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.