CVE-1999-1155

CVE-1999-1155 describes a critical vulnerability in the LakeWeb Mail List CGI script, allowing remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the recipient email address field. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-exploitable flaw with low attack complexity, requiring no authentication, and potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (e.g., Metasploit, ExploitDB), or significant community discussion surrounding this CVE.