Lucene search
+L

CVE-2013-1904

🗓️ 08 Feb 2014 00:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

Absolute path traversal vulnerability in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.ph

Related
Detection
Refs
Paths
NVD
Node
OR
roundcubewebmailRange0.7.2
roundcubewebmailMatch0.120050811
roundcubewebmailMatch0.120050820
roundcubewebmailMatch0.120051007
roundcubewebmailMatch0.120051021
roundcubewebmailMatch0.1alpha
roundcubewebmailMatch0.1beta
roundcubewebmailMatch0.1beta2
roundcubewebmailMatch0.1rc1
roundcubewebmailMatch0.1rc2
roundcubewebmailMatch0.1stable
roundcubewebmailMatch0.2alpha
roundcubewebmailMatch0.2beta
roundcubewebmailMatch0.2stable
roundcubewebmailMatch0.3beta
roundcubewebmailMatch0.3rc1
roundcubewebmailMatch0.3stable
roundcubewebmailMatch0.4beta
roundcubewebmailMatch0.5beta
ParameterPositionPathDescriptionCWE
_valuequery paramindex.phpAbsolute path traversal via _value parameter in generic_message_footer setting in save-perf action to index.php, allowing reading arbitrary files.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:52Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25
EPSS0.02287
88