← Back

W3mail

w3mail

Vendor: Spencer Miles • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-1100
1Spencer Miles
1W3mail
Apr 16, 2026
Oct 7, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.