← Back

Spencer Miles

spencer_miles

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
W3mail
w3mail

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Spencer Miles
1W3mail
Apr 16, 2026
Oct 7, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.