CVE-2003-1202: Omail Webmail

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.

Affected products

• Omail Omail Webmail: version 0.97.3 only; version 0.98.4 only

Published 2003-08-19. Last modified 2026-06-16.