The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04 when the pid parameter is 4 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name (2) email (3) subject or (4) message parameter to index.php.