Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-46686 EUVD-2025-4863GHSA-5mr4-h7fw-j3h9

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earli…

Published Feb 17, 2025 · Updated Feb 18, 2025 · Assigned by jpcert

Vendor: Extra Innovation Product: acmailer CGI Product: acmailer DB

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.

Affected products

VendorProductAffectedFixed
Extra Innovation acmailer CGI ver.4.0.3 and earlier —
Extra Innovation acmailer DB ver.1.1.5 and earlier —

References