EIP-2026-103181

The vulnerability in Open WebMail allows remote command execution due to insufficient sanitization of shell metacharacters passed via URI parameters. The provided example demonstrates exploiting this via the 'loginname' parameter in a crafted request to 'userstat.pl'.