2017-01-30 22:00:00
mitre
PUBLISHED
The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.