Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be executed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open WebMail任意脚本远程执行漏洞
Vulnerability Description
Open Webmail是一款免费开放源代码由PERL编写的WEB EMAIL应用程序，可使用于Unix和Linux操作系统。 Open Webmail中的'openwebmail-shared.pl'脚本不正确检查用户输入，远程攻击者可以利用这个漏洞以root用户权限在系统上执行任意命令。Open Webmail以超级用户帐户使用suidperl运行某几个PERL CGI脚本，其中openwebmail-shared.pl脚本没有正确用户输入，可以导致以root用户权限在系统上执行任意命令
CVSS Information
N/A
Vulnerability Type
N/A