Total vulnerabilities in the database
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
CVSS v2:
No CWE or OWASP classifications available.