Security Advisory
CVE-2015-2180
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.