Description
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
References
- 19981109 Several new CGI vulnerabilities mailing-list
- cgi-perl-mail-programs(1400) vdb-entry