CVE-2003-1202

CVE-2003-1202 describes a critical command injection vulnerability in omail webmail versions 0.98.4 and earlier. Attackers can execute arbitrary commands by injecting shell metacharacters into the password, domainname, or username fields during the login process. This vulnerability carries a CVSS score of 10.0, indicating maximum severity with network-based exploitation, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.