CVE-2012-10046 | ESVA-Project E-Mail Security Virtual Appliance 2057 CGI learn-msg.cgi ID os command injection (EDB-20551)

A vulnerability was found in ESVA-Project E-Mail Security Virtual Appliance 2057. It has been classified as critical. Affected is an unknown function of the file learn-msg.cgi of the component CGI Handler. The manipulation of the argument ID leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2012-10046. It is possible to launch the attack remotely. Furthermore, there is an exploit available.