Directory traversal

2009-09-0922:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

JSON

Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a … (dot dot) in the tf parameter.

References

packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt

www.vupen.com/english/advisories/2009/2460