CVE-2011-0018: Openvas Manager

High severity, CVSS 9.0. EPSS: 9.3% chance of exploitation in the next 30 days.

The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP request to the Greenbone Security Assistant (GSA).

Affected products

• Openvas Openvas Manager: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 2.0 only

Published 2011-01-28. Last modified 2026-06-16.