An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script.
| Software | From | Fixed in |
|---|---|---|
| znuny / znuny | 7.0.1 | 7.1.3.x |
| znuny / znuny | 6.0.31 | 6.0.48.x |
| znuny / znuny | 6.5.1 | 6.5.11.x |