CVE-2004-2284

CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...

CVE-2005-2284

WebEOC prior to version 6.0.2 contains multiple SQL injection vulnerabilities that allow remote attackers to modify SQL statements, potentially viewing or modifying data or issuing database commands. Affected component is the WebEOC web application; the underlying issue is improper input filterin...

CVE-2004-2284

The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...