CVE-2008-4932

2008-11-0514:51:00

mitre

www.cve.org

7.3 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

JSON

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.