CVE-2014-1683: Use of Externally-Controlled Format String

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 name, 2 email, 3 subject, or 4 message parameter to...

PT-2014-4291

Name of the Vulnerable Software and Affected Versions SkyBlueCanvas CMS versions prior to 1.1 r248-04 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the name, email, subject, or message parameter to "index.php" when the pid parameter is 4...