Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-5400

Openfind Mail2000 - OS Command Injection

Description

Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Openfind Mail2000 V8.0

Default version status: unaffected

  • earlier to < Patch 34affected

References