CVE-2014-1203

Critical

Published: 24/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The get_login_ip_config_file function in Eyou Mail System before version 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter.

Risk Assessment

Attackers may gain access to the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update the Eyou Mail system to the latest version to eliminate this vulnerability and implement additional security measures to protect against attacks.

Original NVD description (English source)

The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php.