CVE-2014-1203

The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-10-24

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Eyou (Eyou)

References

• http://seclists.org/fulldisclosure/2014/Jan/32