CVE-2004-1468

CVE-2004-1468 describes a critical command injection vulnerability affecting Usermin and Webmin versions 1.x. This flaw allows unauthenticated remote attackers to execute arbitrary commands by injecting shell metacharacters into email messages processed by the webmail functionality. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential interest.