ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Webstore_400 | Cgicentral | 4.14 (including) | 4.14 (including) |
Webstore_400cs | Cgicentral | 4.14 (including) | 4.14 (including) |