Command injection

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

PT-2013-6276

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 7.6 Description The issue allows remote authenticated administrators to execute arbitrary commands. This can be achieved by specifying the commands in the value attribute within a Command or Script XML element...