CVE-2012-10046

The E-Mail Security Virtual Appliance ESVA tested on version ESVA2057 contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands...

CVE-2012-10046: Improper Neutralization of Special Elements used in an OS Command

The E-Mail Security Virtual Appliance ESVA tested on version ESVA2057 contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands...

ESVA 2.0.6 /cgi-bin/learn-msg.cgi 命令执行漏洞

No description provided by source...

EMail Security Virtual Appliance learn-msg.cgi Remote Code Execution

The version of EMail Security Virtual Appliance installed on the remote host is affected by a code execution vulnerability in the 'id' parameter of the 'learn-msg.cgi' script. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary commands on the remote host subject t...

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

Exploit for cgi platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...