Description
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
References
- http://lakeweb.com/scripts/
- 19981109 Several new CGI vulnerabilities mailing-list
- cgi-perl-mail-programs(1400) vdb-entry