CVE-2025-43920

CVE-2025-43920：GNU Mailman 2.1.39（cPanel/WHM 捆绑版）中通过邮件主题实施的命令注入 发现者： Firudin Davudzada 与 Musazada Aydan 公开日期： 2025年4月 CVE ID： CVE-2025-43920 严重性： 5.4 中等 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N 攻击类型： 远程 受影响软件： GNU Mailman 2.1.39（捆绑于 cPanel/WHM） 概述 GNU Mailman 2.1.39 在随 cPanel 和 WHM...

Exploit for OS Command Injection in Gnu Mailman

CVE-2025-43920: Command Injection via Email Subject in GNU Mai...

CVE-2025-43920

GNU Mailman 2.1.39, as bundled in cPanel and WHM, in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardles...

Mailman 1.1 + external archiver vulnerability

SUMMARY Mailman from www.list.org is a mailing list manager with strong Web functionality. If a site is running Mailman 1.1 with an external archiving mechanism that uses the internal variable listnames, list administrators can run any command with the Webserver's uid/gid. A patch is available at...