https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T22:39:55.495777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-10046 CVE-2012-10046 — E-Mail Security Virtual Appliance learn-msg.cgi Command Injection 2026-10-22T22:39:55.496948+00:00

Affected: ESVA-Project E-Mail Security Virtual Appliance

The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and results in full command execution on the underlying system.