CVE-2009-3124

2022-10-0316:23:54

mitre

www.cve.org

quarkmail

directory traversal

get_message.cgi

6.6 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

JSON

Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a … (dot dot) in the tf parameter.

References

packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt

www.vupen.com/english/advisories/2009/2460