CVE-2018-0514

MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2018-02-08

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Mp Form Mail Cgi (Futomi)
• Mp Form Mail Cgi Ecommerce Edition (Futomi Co. Ltd.)

References

• http://www.futomi.com/library/mpmailec.html#history
• https://jvn.jp/en/jp/JVN15462187/index.html